Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
starkware-libs/stwo-cairo
main @ 0d3f483
10
Fixes
0
CVEs
HIGH
Peak severity
42.9%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
cairo-air: most-fixed (2 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Allowing user-provided parameters (such as public segment starts) to bypass global context allows the prover to craft invalid executions. Deriving segment boundaries directly from trusted public memory segments is crucial.
Cryptographic Soundness: Failing to mix optional components or raw outputs directly into the Fiat-Shamir channel permits malleability attacks where provers can manipulate optional structures without changing the random seeds generated by the verifier.
Cryptographic Soundness Vulnerability: Failing to verify preprocessed column usage and masking allows malicious provers to submit arbitrary valuations for unused columns, breaking soundness guarantees in AIR evaluation.