Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

golang/net

              master @ d34deae
            

Fixes

CVEs

HIGH

Peak severity

50.0%

Coverage

Highlights

HTTP Request Smuggling: 7 prior fixes. Scrutinize any change in this area.

html/render.go: most-fixed (4 issues). Treat as high-risk during review.

25 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

HTTP Request Smuggling: Multiple fixes address header validation gaps (authority/Host mismatch, connection headers, :path, :authority userinfo, :protocol ordering, DATA frame timing) that allow request smuggling between front-end and back-end.

Sanitizer Bypass: Multiple fixes prevent sanitizer bypasses via duplicate attributes, namespace confusion in end tags, foreign content rendering, and doctype escaping, indicating a fragile HTML parser/renderer.

Header Injection: Header injection vulnerabilities arise from incorrect validation arguments and missing checks on header names/values in HTTP/3 server and client paths.