Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
trezor/trezor-suite
develop @ 08b89f0
61
Fixes
0
CVEs
CRITICAL
Peak severity
25.8%
Coverage
Highlights
Auth Bypass: 27 prior fixes. Scrutinize any change in this area.
suite-native/biometrics: most-fixed (3 issues). Treat as high-risk during review.
30 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Flaws in handling application background transitions and state checking repeatedly allowed users to bypass biometric authentication on app resume and cold starts. Ensure strict state validation on return from null background transitions.
Authentication Bypass: Weaknesses in certificate validation—including a lack of X.509 path constraints, missing date boundary checks, and a lack of cross-validation of serial numbers—could allow spoofed or compromised hardware to pass authenticity checks.
Auth Bypass: Missing permission checks enabled unauthorized third-party applications to call sensitive hardware wallet configuration APIs or invoke actions without the required management permissions.