Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

kadena-io/chainweb-node

              master @ 5e46fa7
            

Fixes

CVEs

CRITICAL

Peak severity

41.4%

Coverage

Highlights

Denial of Service: 18 prior fixes. Scrutinize any change in this area.

src/Chainweb/Pact/PactService.hs: most-fixed (6 issues). Treat as high-risk during review.

21 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: A short-circuiting bug in signature verification within the SignedList verifier plugin allowed invalid signatures to bypass authentication completely. Developers must avoid short-circuit evaluation logic inside core cryptographic validation functions.

SQL Injection: The use of dynamic string concatenation in raw SQL queries allowed potential SQL injection through table identifiers. Dynamic table names must be strictly validated against character allowlists, and all other parameters must utilize parameterized query APIs.

Auth Bypass: A critical logic flaw in the coin contract 'credit' function allowed existing account guards to be overwritten and hijacked during credit operations. Guard consistency must be validated before writing updates to the coin-table.