Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
multiversx/mx-chain-go
master @ 54855d9
149
Fixes
2
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Denial of Service: 59 prior fixes. Scrutinize any change in this area.
consensus/spos: most-fixed (6 issues). Treat as high-risk during review.
97 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Peer identity verification routinely bypassed proper signature validation or relied on inadequate cache-lookup optimizations, allowing potential sender spoofing or bypasses of legitimate peer checks. Developers must strictly enforce signature checks against the actual message originator identity.
Auth Bypass: Header proof verification failed to enforce cryptographic signature checks or used flawed epoch boundary calculations (using strict equality instead of greater-than-or-equal checks), enabling unauthorized block state transitions and proof reuse.
Denial of Service: Race conditions and concurrent map read/write access to consensus state variables triggered application panics and node crashes during validator processing. State modifications must use exclusive write locks rather than read locks.