Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cloudflare/agents

              main @ 6560a4a
            

Fixes

CVEs

HIGH

Peak severity

28.1%

Coverage

Highlights

Auth Bypass: 11 prior fixes. Scrutinize any change in this area.

packages/agents/src/index.ts: most-fixed (7 issues). Treat as high-risk during review.

19 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Insecure direct object reference via raw header parsing allowed external attackers to route inbound mail to unauthorized Durable Object instances. This was addressed by requiring HMAC-SHA256 signatures.

Denial of Service: Durable Object alarm loops could trigger infinite retry execution during OOM crashes, resulting in massive resource exhaustion. A circuit breaker, retry limit, and strike limits were implemented to mitigate this.

SSRF: The Model Context Protocol client was vulnerable to SSRF bypasses via IPv4-mapped IPv6 addresses and link-local IPv6 ranges (fe80::/10), which bypassed basic URL blocklists.