Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
google/trillian
master @ c8c9830
26
Fixes
33
CVEs
CRITICAL
Peak severity
77.3%
Coverage
Highlights
Denial of Service: 12 prior fixes. Scrutinize any change in this area.
crypto/verifier.go: most-fixed (4 issues). Treat as high-risk during review.
15 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The key loading mechanism permitted loading untrusted PKCS#11 shared library modules defined in tree metadata. Restricting module path loading to static server configuration flags prevents arbitrary binary loading on the server.
Auth Bypass: The JWT token provider was vulnerable to authentication bypass because it accepted unsigned tokens utilizing the 'none' signature algorithm. Rejecting empty signing methods was required to enforce authentic user sessions.
Auth Bypass: Relying on error-prone JSON-based object hashing for verifying map root signatures allowed structured bypasses. This required replacing the validation mechanism with strict binary serialization and structured validation via MapRootV1.