Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

facebook/proxygen

              main @ 4954ad1
            

167

Fixes

CVEs

CRITICAL

Peak severity

36.1%

Coverage

Highlights

Denial of Service: 48 prior fixes. Scrutinize any change in this area.

proxygen/lib/http/session/HTTPSession.cpp: most-fixed (12 issues). Treat as high-risk during review.

98 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Use-After-Free: The session layer has a large number of lifetime-management bugs, often involving callbacks firing after object destruction or re-entrant operations during teardown.

HTTP Request Smuggling: Multiple fixes address ambiguous Transfer-Encoding/Content-Length handling and header validation, indicating a persistent risk of parser differentials with upstream/downstream proxies.

Denial of Service: Integer overflows and unbounded queue growth in QPACK decoding can be triggered by malicious header blocks, leading to crashes or memory exhaustion.