Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

avaloniaui/avalonia

              master @ 9691b4e
            

Fixes

CVEs

CRITICAL

Peak severity

42.9%

Coverage

Highlights

Memory Corruption: 3 prior fixes. Scrutinize any change in this area.

.NET: most-fixed (1 issue). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site WebSocket Hijacking: The designer's remote HTML transport layer was vulnerable to unauthorized cross-site connections, potentially allowing external sites to hijack the previewer interface. This required implementing HTTP Origin validation and a token-based cookie handshake.

Insecure Deserialization: The Visual Studio designer communication channel allowed arbitrary type resolution during deserialization, which could lead to remote code execution. The fix introduced strict type-filtering within the serialization binder.

Memory Corruption: A double-free vulnerability existed in the native COM proxy wrappers, where concurrent or duplicate Dispose calls could release the same underlying native handle multiple times, potentially leading to instability or code execution.