Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
str4d/rage
main @ d28f10e
5
Fixes
4
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Cryptographic Issues: 2 prior fixes. Scrutinize any change in this area.
age-core/src/primitives.rs: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Issues: The MAC validation process previously verified round-tripped canonical header bytes instead of the exact received header bytes, potentially allowing altered headers to pass validation checks. Developers must ensure validation is always performed on exact, unmodified input structures.
Memory Exposure: Cryptographic secrets and private keys read from identity files were retained in memory via un-zeroized buffers, risking exposure through memory dumps or local side channels. All temporary buffers parsing private key material must be zeroized immediately after consumption.
Path Traversal: Mounting ZIP files using deprecated 'sanitized_name' allowed potential directory traversal attacks. Utilizing 'enclosed_name' is required to ensure extracted or mounted file paths remain strictly within the target extraction root.