Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

linera-io/linera-protocol

              main @ c4cafff
            

102

Fixes

CVEs

HIGH

Peak severity

42.4%

Coverage

Highlights

Denial of Service: 70 prior fixes. Scrutinize any change in this area.

linera-execution: most-fixed (31 issues). Treat as high-risk during review.

61 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Smart contract and oracle executions lacked proper resource constraints, allowing unmetered resource consumption, unpriced storage writes, and unbounded memory consumption from external oracle responses. Developers must enforce strict pricing, fuel allocation, and response size limits.

Auth Bypass: Validation defects in consensus managers and transaction state transition paths allowed validators to vote on incorrect rounds, process unauthenticated block contents, or bypass consensus locking policies in multi-owner configurations.

Server-Side Request Forgery: Smart contracts executing on validators were historically capable of initiating arbitrary outbound HTTP oracle requests, exposing validators to internal network scanning and unauthorized requests.