Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
bevyengine/bevy
main @ cbfaae4
91
Fixes
1
CVEs
HIGH
Peak severity
37.1%
Coverage
Highlights
Denial of Service: 46 prior fixes. Scrutinize any change in this area.
bevy_ecs: most-fixed (9 issues). Treat as high-risk during review.
39 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Safety: QueryState methods have historically suffered from type confusion and memory unsafety when queried with mismatched World instances or permissive lifetimes, allowing downstream safe code to violate Rust's aliasing rules.
Data Race: Component access validation failures (such as with AnyOf queries) have previously allowed concurrent systems to violate Rust's aliasing rules, resulting in data races and undefined behavior.
Memory Corruption: Eager evaluation of unchecked lookups and mismatched allocation layouts between columns and vectors has historically caused out-of-bounds memory writes and undefined behavior.