Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ordinals/ord

              master @ 16d40e6
            

Fixes

CVEs

HIGH

Peak severity

30.0%

Coverage

Highlights

Denial of Service: 11 prior fixes. Scrutinize any change in this area.

src/subcommand/server.rs: most-fixed (10 issues). Treat as high-risk during review.

12 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Attackers can exploit decompression routines using gzip/brotli decompression bombs to exhaust server memory and disk space, leading to server crashes during inscription indexing.

Denial of Service: Unchecked integer arithmetic and division-by-zero errors in the display and parsing routines of Runes can lead to daemon crashes when processing malicious transactions.

XSS: Serving untrusted user-generated inscription contents (including raw HTML/SVG) from the content endpoint can allow arbitrary script execution under the server's origin.