Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

paddlepaddle/paddle

              develop @ e866409
            

Fixes

CVEs

CRITICAL

Peak severity

21.6%

Coverage

Highlights

Denial of Service: 56 prior fixes. Scrutinize any change in this area.

paddle/phi/kernels: most-fixed (7 issues). Treat as high-risk during review.

34 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Deserialization of Untrusted Data: Standard pickle loading of untrusted models allows arbitrary code execution. The custom RestrictedUnpickler must systematically audit the Method Resolution Order (MRO) to prevent bypasses of the allowed type list.

Code Execution: Using eval() dynamically on program cache keys, environment variables, or dynamic shape operators exposes the application to severe remote code execution vulnerabilities.

Command Injection: Invoking operating system utilities (such as wget or subprocess shells) with unquoted or unsanitized user-supplied URLs allows command injection via shell metacharacters.