Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
klever-io/klever-go
develop @ f8f11f0
28
Fixes
1
CVEs
HIGH
Peak severity
37.5%
Coverage
Highlights
Auth Bypass: 12 prior fixes. Scrutinize any change in this area.
kvm/vmhost/hostCore/execution.go: most-fixed (3 issues). Treat as high-risk during review.
19 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Attackers can bypass transaction integrity checks or hijack system addresses if validation filters fail to block invalid transaction senders, such as the system's black hole address or smart contract addresses.
Signature Malleability: Allowing non-canonical, high S-values in Secp256k1 signatures permits signature malleability, which compromises transaction integrity and cryptographic verification consistency.
Auth Bypass: Executing actions like contract deletion or token transfers directly without setting up proper VM environments can bypass critical state tracking, gas metering, and payable rules.