Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rabbitmq/amqp091-go
main @ e5bde41
3
Fixes
0
CVEs
MEDIUM
Peak severity
33.3%
Coverage
Highlights
Data Integrity: 1 prior fix. Scrutinize any change in this area.
auth.go: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Data Integrity: Truncation or integer wrapping when serializing strings exceeding protocol-defined bounds can result in misaligned framing, corrupted protocol states, or data injection into subsequent AMQP frame boundaries. Ensure strict length validation is applied before type casting or payload assembly.
Query Parameter Injection: Constructing connection URIs using manual string concatenation can allow attackers to inject arbitrary query parameters, potentially overriding critical TLS configuration options or directing connections to untrusted endpoints. Always utilize robust parsing and serialization libraries like url.Values.
Information Disclosure: Leaving plaintext SASL credentials raw in memory or failing to override default string representation allows sensitive authentication data to leak into logs, error messages, or APM traces. Implement custom string formatters to redact secrets and zero-out memory where applicable.