Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

microsoft/agent-governance-toolkit

              main @ 9f2512f
            

Fixes

CVEs

CRITICAL

Peak severity

34.8%

Coverage

Highlights

Signature Verification Bypass: 11 prior fixes. Scrutinize any change in this area.

agent-governance-golang/packages/agentmesh/sandbox.go: most-fixed (2 issues). Treat as high-risk during review.

46 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation: 2 historical fix(es) link agent-governance-python/agent-mesh/src/agentmesh/trust/capability.py to Privilege Escalation.

SSRF: 2 historical fix(es) link policy-engine/sdk/rust/src/host/mod.rs to SSRF.

Signature Verification Bypass: 2 historical fix(es) link agent-governance-typescript/src/encryption/x3dh.ts to Signature Verification Bypass.