Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
GNOME/libxslt
master @ ec95343
72
Fixes
0
CVEs
HIGH
Peak severity
41.7%
Coverage
Highlights
Memory Corruption: 18 prior fixes. Scrutinize any change in this area.
libxslt/transform.c: most-fixed (22 issues). Treat as high-risk during review.
56 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Use After Free: Dominant vulnerability class with numerous fixes involving node deletion, text copying, RVT lifetime, and context node handling; improper pointer lifetime is the most common root cause.
Memory Corruption: Multiple fixes for integer overflows, uninitialized variables, incorrect pointer linkage, and dictionary mismatches leading to crashes or corruption; central transformation logic is a hotspot.
Auth Bypass: Security framework bypasses via negative return values, path parsing, and callback evaluation on partial URLs; these undermine the entire access-control model.