Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
foundry-rs/foundry
master @ 1630905
49
Fixes
2
CVEs
HIGH
Peak severity
48.3%
Coverage
Highlights
Denial of Service: 24 prior fixes. Scrutinize any change in this area.
crates/config/src/fs_permissions.rs: most-fixed (4 issues). Treat as high-risk during review.
11 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unsafe integer conversions (U256 to u128) and un-saturating math in balance/gas calculations directly trigger service-terminating panics in the Anvil node. This is a recurring theme across multiple components.
Path Traversal: Defects in finding and resolving permissions for nested directories led to directory escape and unauthorized reads/writes. Standard normalization must be applied universally before checking allows-lists.
Denial of Service: Unbounded contract size and EVM memory consumption allow attackers to cause Out-Of-Memory (OOM) crashes on the host machine. Resolving this required strict execution limits.