Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

zama-ai/fhevm

              main @ b06855c
            

Fixes

CVEs

HIGH

Peak severity

57.5%

Coverage

Highlights

Auth Bypass: 29 prior fixes. Scrutinize any change in this area.

Workflows: most-fixed (4 issues). Treat as high-risk during review.

37 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Flaws in delegation expiry inequality boundary checks and logical inversions in revocation allowed invalid delegations to remain active or prevent valid revocations from taking effect. Ensure exact boundary comparisons and correct logic flags.

Deserialization: Unsafe deserialization of ciphertexts, cryptographic keys, and proof configurations via standard `bincode::deserialize` poses a risk of arbitrary execution or panic. Safe-deserialization wrappers with strict conformance and parameter limitations must be enforced.

Auth Bypass: Lack of strict KMS context ID pinning and EIP-712 chain/contract domain verification allowed signatures from different rotations or chains to be replayed or combined to meet consensus thresholds. Ensure rigorous context pinning and domain validation.