Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
filosottile/age
main @ 706dfc1
3
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Cryptographic Issues: 2 prior fixes. Scrutinize any change in this area.
age: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Unsanitized plugin names in recipient or identity strings can allow path traversal, enabling the execution of arbitrary local binaries under the guise of an age plugin. This requires strict character allowlisting on the plugin name before execution.
Cryptographic Issues: Vulnerability to partition and multi-key attacks on ChaCha20Poly1305 decryptors was mitigated by strictly limiting ciphertext size. Failure to enforce expected fixed-length constraints can leak key structures or permit malleability attacks.
Cryptographic Issues: Lenient header parsing previously accepted MAC fields that were not exactly 32 bytes, masking format and malleability errors during decryption. Strict size checks are required during parsing to enforce structural integrity.