Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

piskvorky/smart_open

              develop @ 466acd9
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Denial of Service: 1 prior fix. Scrutinize any change in this area.

smart_open/compression.py: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Closing transparently compressed streams (like gzip or bz2) historically failed to close the underlying transport stream, resulting in file descriptor leaks that can deplete system resources and lead to Denial of Service.