Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
noir-lang/noir
master @ 3e90d85
80
Fixes
2
CVEs
HIGH
Peak severity
28.6%
Coverage
Highlights
Auth Bypass: 14 prior fixes. Scrutinize any change in this area.
compiler/noirc_evaluator: most-fixed (10 issues). Treat as high-risk during review.
45 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The RangeOptimizer incorrectly eliminated critical range-check constraints because it did not treat ACIR Call opcodes as side-effect boundaries, potentially allowing invalid witness values to bypass checks.
Cryptographic Issues: During control flow graph flattening, range checks on predicated values inside conditional branches were not properly multiplied by the branch condition predicate, letting provers bypass range constraints in unexecuted or inactive branches.
Auth Bypass: The compiler failed to reject returning enums from unconstrained functions to constrained callers, which enabled provers to forge out-of-range tags and bypass constraint verification entirely.