Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
paritytech/jsonrpc
master @ dc9550b
4
Fixes
0
CVEs
MEDIUM
Peak severity
33.3%
Coverage
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
ipc/src/server.rs: most-fixed (2 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Race conditions during server shutdown can trigger use-after-free conditions and segmentation faults. Explicitly dropping servers and futures before signaling completion is critical to preventing daemon instability.
Denial of Service: Memory exhaustion vulnerabilities exist when WebSocket fragment and in-buffer capacities are not bound to the configured maximum payload size. Unrestricted buffers allow remote clients to crash the server transport.
Denial of Service: Resource leaks and connection exhaustion can occur if IPC connection streams are not properly tracked and terminated when client pipes disconnect. Failing to select with weak references causes deadlocks or dangling streams.