Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
python/cpython
main @ 27148d0
284
Fixes
31
CVEs
CRITICAL
Peak severity
22.2%
Coverage
Highlights
Memory Corruption: 51 prior fixes. Scrutinize any change in this area.
Objects/unicodeobject.c: most-fixed (20 issues). Treat as high-risk during review.
136 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Integer calculations involving untrusted file sizes inside zip archives can overflow, causing undersized heap allocations and subsequent heap buffer overflows.
Path Traversal: Historically prone to directory traversal via symbolic/hard link manipulation and unescaped relative path targets during extraction, leading to arbitrary file writes.
Use After Free: Concurrency, re-entrant error handling, or parsing logic errors in f-string decoding and multi-byte character parsing can lead to use-after-free or double-free conditions of the internal tokenizer buffer.