Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
erigontech/erigon
main @ c3db146
247
Fixes
0
CVEs
HIGH
Peak severity
34.2%
Coverage
Highlights
Denial of Service: 186 prior fixes. Scrutinize any change in this area.
txnprovider/txpool: most-fixed (14 issues). Treat as high-risk during review.
119 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unbounded resource allocation and lack of rate-limiting on incoming peer messages at the framing layer easily lead to memory exhaustion (OOM) crashes. For instance, unconstrained buffering of peer responses and unvalidated payload size fields have repeatedly threatened node availability.
Denial of Service: The transaction pool is vulnerable to resource exhaustion, block-poisoning, and censorship when processing malformed or complex transaction formats. Missing validation bounds on transaction gas limits, duplicate EIP-7702 authorizations, and fragile signature parsing can result in pool processing aborts or CPU starvation.
Auth Bypass: Privileged administrative and consensus-level operations, such as the Engine API, can become exposed to unauthenticated interfaces or bypass critical validation logic if the virtual-host parser is case-sensitive, or if standard HTTP endpoints fail to isolate engine ports.