Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
tracel-ai/burn
main @ d028234
9
Fixes
1
CVEs
CRITICAL
Peak severity
Highlights
Denial of Service: 6 prior fixes. Scrutinize any change in this area.
burn-cubecl: most-fixed (1 issue). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: The external data loading mechanism in the ONNX IR parser was vulnerable to path traversal, absolute path resolution, and null-byte injection, allowing unauthorized reading of local files outside the designated workspace directory. Developers must ensure path canonicalization and strict prefix checks are used before reading external model resources.
Denial of Service: Manual flat buffer index math based on untrusted tensor dimensions and strides caused out-of-bounds reads and GPU memory corruption. Tight dimension constraints and contiguous layout verification must be enforced on all input kernels.
Memory Safety: Unsafe raw pointer operations and manual lifetime tracking inside execution optimization engines led to use-after-free and unsound pointer access patterns, necessitating the use of safe reference-counting strategies.