Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
celestiaorg/celestia-app
main @ b3d2eef
88
Fixes
0
CVEs
HIGH
Peak severity
31.4%
Coverage
Highlights
Denial of Service: 41 prior fixes. Scrutinize any change in this area.
app: most-fixed (12 issues). Treat as high-risk during review.
64 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unbounded resource allocation during Groth16 verifying key deserialization can lead to out-of-memory (OOM) crashes and validator node starvation. Defensive size boundaries must be checked prior to allocation.
Auth Bypass: Nested transactions wrapped within authz MsgExec messages bypass standard gas limit and validation decorators unless decorators recursively unwrap and validate all child operations.
Denial of Service: The Fibre networking and data-reconstruction layer suffers from remote crashes caused by unvalidated nil pointers, lack of maximum size caps on rows, and duplicate index structures in validators.