Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bzikarsky/gelf-php

              master @ d592ca5
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Broken Cryptography: 3 prior fixes. Scrutinize any change in this area.

src/Gelf/Transport/HttpTransport.php: most-fixed (2 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Broken Cryptography: The HTTP transport component has repeatedly failed to properly establish and enforce TLS peer name verification across different PHP version environments, potentially exposing GELF log transmissions to MITM attacks.

Broken Cryptography: Misconfiguration of SSL context parameters on PHP 5.6+ led to broken peer name verification due to the use of the deprecated 'CN_match' option instead of the 'peer_name' setting.