Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

google/martian

              master @ 0f7e679
            

Fixes

CVEs

HIGH

Peak severity

72.7%

Coverage

Highlights

Denial of Service: 5 prior fixes. Scrutinize any change in this area.

proxy.go: most-fixed (5 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Concurrent request handling and state updates on shared Transport structures historically led to resource exhaustion and data races. Failure to properly close client connections upon receiving server close signals resulted in socket leaks.

Auth Bypass: Layering traffic-shaping connections over transport connections historically masked TLS headers and indicators, causing Martian to mistake secure HTTPS streams for plaintext HTTP.

Information Disclosure: Traffic recorders and loggers (HAR/MARBL) designed to trace proxied connections historically recorded internal admin API traffic and endpoints, exposing administrative configurations and authorization tokens.