Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

dmotz/trystero

              main @ 70ac1a3
            

Fixes

CVEs

HIGH

Peak severity

25.0%

Coverage

Highlights

Denial of Service: 2 prior fixes. Scrutinize any change in this area.

packages/core/src/utils.ts: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cryptographic Weakness: The use of unauthenticated AES-CBC mode exposed encrypted payloads to ciphertext tampering and padding oracle attacks. Moving forward, any cryptographic primitives must explicitly enforce authenticated encryption (AES-GCM) and guarantee integrity over transit.

Denial of Service: Unconstrained subscription batching to relays allowed exhaustion of relay limits. Input parsing and rigorous size chunking must be enforced on all outbound subscription streams.

Broken Access Control: Race conditions in WebRTC peer signaling allowed signals to cross boundaries due to unscoped peer tracking. Relying on global or poorly scoped peer maps permits unexpected state overwriting during concurrent handshakes.