Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
boa-dev/boa
main @ 598d184
8
Fixes
0
CVEs
HIGH
Peak severity
62.5%
Coverage
Highlights
Auth Bypass: 2 prior fixes. Scrutinize any change in this area.
.github/workflows: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Lossy u64-to-f64 conversion during index validation in %TypedArray%.prototype.with() can lead to out-of-bounds access. This is a high-severity memory safety issue in a core builtin.
Use After Free: Incorrect non-root reference counting can cause live objects to be garbage collected, leading to use-after-free. The fix caps non_root_count at ref_count, but other GC paths may still be vulnerable.
Integer Overflow: Integer truncation when converting 64-bit size to usize before allocation can lead to undersized buffers and memory corruption. The fix uses try_into, but other allocation sites may share the pattern.