Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
unum-cloud/usearch
main @ 9fd6b01
19
Fixes
0
CVEs
HIGH
Peak severity
43.8%
Coverage
Highlights
Denial of Service: 10 prior fixes. Scrutinize any change in this area.
include/usearch/index.hpp: most-fixed (7 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Use After Free: Passing transient Python buffer objects to native memory mappings without extending their lifetimes causes use-after-free conditions once the original Python objects are garbage collected.
Memory Safety: Closures and temporary buffers passed from Rust to the C++ native layer can be dropped prematurely, leaving dangling pointers that cause use-after-free and memory corruption during callbacks.
Heap Buffer Overflow: Insufficient pre-allocation reservations in HNSW search structures and sizing computation errors during vector serialization can cause heap-buffer-overflows.