Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rosenpass/rosenpass
main @ 5055d6b
5
Fixes
1
CVEs
MEDIUM
Peak severity
40.0%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
rosenpass/src/protocol.rs: most-fixed (2 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Duplicate key exchanges could be triggered by retransmitted InitConf messages due to missing biscuit number validation, potentially leading to state-exhaustion or session synchronization bypasses.
Protocol Flaw: Incorrect protocol validation where MAC verification was incorrectly performed against a stored state variable instead of deriving it dynamically from the actual retransmitted handshake message.
Incorrect Permission Assignment for Critical Resource: Secret keys and configurations were written to disk with default permissive file creation masks, exposing highly sensitive private keys to local unauthorized users.