Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

haifengl/smile

              master @ b174d2c
            

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Deserialization of Untrusted Data: 2 prior fixes. Scrutinize any change in this area.

base/src/main/java/smile/data/SQL.java: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Insecure Deserialization: The use of XStream for XML deserialization allowed remote code execution. Complete removal of the vulnerable XStream APIs from the Scala IO module was necessary to eliminate this risk.

Deserialization of Untrusted Data: Standard Java serialization via ObjectInputStream in Read.object(Path) exposed the library to remote code execution through gadget chains, requiring the implementation of a strict ObjectInputFilter.

SQL Injection: Direct construction of queries using unvalidated strings in the database module enabled SQL injection. Hardening required strict identifier validation and literal escaping.