Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hyperledger-indy/indy-sdk
main @ 2d47f2f
48
Fixes
0
CVEs
HIGH
Peak severity
69.7%
Coverage
Highlights
Auth Bypass: 19 prior fixes. Scrutinize any change in this area.
libindy: most-fixed (8 issues). Treat as high-risk during review.
29 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The AnonCreds verifier is prone to signature and verification bypasses due to incorrect comparisons of revealed attributes, failures to properly propagate validation errors, and flawed logic when matching user-reported values against requested restrictions.
Memory Safety: FFI boundaries between Rust and host languages have repeatedly suffered from incorrect ABI definitions (missing 'extern' qualifiers) and incorrect pointer type handling, leading to segmentation faults and memory corruption.
Cryptographic Issues: Flawed cryptographic operations, such as substituting the initialization vector in place of ciphertext during decryption, have previously led to authentication tag bypasses.