Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ruby/digest
master @ 1d77b3a
1
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Information Disclosure: 1 prior fix. Scrutinize any change in this area.
ext/digest/sha2/sha2.c: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Incomplete sanitization of cryptographic context structures in native code can leave sensitive SHA2 state in memory, allowing subsequent allocations or concurrent operations to read uncleared data. Using incorrect size arguments (e.g., pointer size instead of structure size) in zeroing functions leaves the majority of the context intact.