Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
DataDog/go-tuf
master @ 8c61504
9
Fixes
0
CVEs
CRITICAL
Peak severity
62.5%
Coverage
Highlights
Signature Verification Bypass: 3 prior fixes. Scrutinize any change in this area.
client/client.go: most-fixed (3 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Signature Verification Bypass: Threshold signature verification counted key IDs instead of distinct verified keys, allowing an attacker to satisfy a threshold with multiple key IDs belonging to a single key. This was fixed twice, indicating a persistent and high-impact flaw.
Key ID Collision: Key ID collisions were not rejected, enabling an attacker to substitute a different key with the same ID, undermining trust in the root of trust.
Information Disclosure: Private keys could be serialized into the root manifest, leading to full key compromise. The fix separated private and public key serialization.