Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

azure/azure-sdk-for-python

              main @ 8c811fa
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

azure-confidentialledger: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: Sensitive credentials, including Authorization headers and Shared Access Signature (SAS) query parameters, are leaked to untrusted external domains during cross-domain HTTP redirections if not explicitly stripped.

Information Disclosure: Authorization bearer tokens are vulnerable to exposure over cleartext HTTP or untrusted redirect destinations within confidential ledger client connections.

SSRF: Unvalidated recording URLs passed to the downloader can result in Server-Side Request Forgery (SSRF), allowing arbitrary HTTP requests to internal metadata or network endpoints.