Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
livekit/agents-js
main @ 7757a2e
14
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Denial of Service: 9 prior fixes. Scrutinize any change in this area.
agents/src/voice/agent_activity.ts: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Outstanding speech tasks, unresolved generation futures, and pending interrupt queues can cause indefinite thread hangs or unresponsive states during agent session interruptions and shutdown.
Denial of Service: Mutex locks and slot reservations in the process pool can leak during initialization failures and premature closures, leading to absolute pool exhaustion and a complete denial of service.
Insecure TLS Configuration: The explicit configuration of 'rejectUnauthorized: false' in WebSocket settings completely disabled upstream TLS verification, exposing connections to potential man-in-the-middle (MitM) attacks.