Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

oceanbase/seekdb

              develop @ 43146d0
            

Fixes

CVEs

HIGH

Peak severity

57.1%

Coverage

Highlights

Denial of Service: 4 prior fixes. Scrutinize any change in this area.

deps/oblib/src/rpc/obmysql/packet/ompk_handshake_response.cpp: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Regular user sessions could collide with the reserved internal/privileged session ID 1 due to insufficient candidate ID boundaries during session initialization.

Out-of-bounds Read: MySQL handshake packet decoding utilized unsafe strlen calls on untrusted input buffers, creating risks of information disclosure or process crashes.

Use After Free: Unvalidated or uninitialized tenant ID evaluations bypassed safety checks, causing memory nodes to be prematurely retired and freed while active references persisted.