Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ledgerwatch/erigon

              main @ bf3e826
            

322

Fixes

CVEs

CRITICAL

Peak severity

31.6%

Coverage

Highlights

Denial of Service: 161 prior fixes. Scrutinize any change in this area.

txnprovider/txpool/pool.go: most-fixed (8 issues). Treat as high-risk during review.

155 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: The largest risk category; fixes repeatedly address unbounded memory growth, missing size/rate limits, and panics from malformed peer or RPC input across many components.

Data Integrity / State Corruption: Multiple fixes address inconsistent views, stale cache entries, and incorrect state flushing in parallel execution and state management, risking chain forks or serving wrong data.

Auth Bypass: Auth bypasses span transaction pool admission, RPC authentication, WebSocket origin checks, and consensus authorization, often due to missing validation or incorrect unwrapping of engine types.