Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

pyca/pyopenssl

              main @ c6b4a5f
            

Fixes

CVEs

CRITICAL

Peak severity

75.0%

Coverage

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

src/OpenSSL/SSL.py: most-fixed (3 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Inadequate bounds validation on user-controlled callbacks can overflow native memory buffers during DTLS cookie generation. This allows attackers to cause remote memory corruption or arbitrary code execution via crafted callbacks.

Auth Bypass: Unhandled Python exceptions raised inside callbacks (such as the SNI servername callback) are silently swallowed, allowing the underlying TLS handshake to proceed and potentially bypassing host validations or access controls.

Memory Safety: Attempting to reuse a TLS Session with a different SSL Context (SSL_CTX) than its origin context leads to undefined behavior and potential memory corruption in the underlying OpenSSL layer.