Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
opencv/opencv-python
4.x @ 2ba8bf6
5
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Out-of-bounds Write: 5 prior fixes. Scrutinize any change in this area.
docker/manylinux2014/Dockerfile_*: most-fixed (4 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Out-of-bounds Write: ffmpeg 8.1.1 contained a MagicYUV decoder OOB write (CVE-2026-8461) enabling DoS/RCE; the fix was a one-patch bump to 8.1.2, indicating a single missing update is the root cause.
Out-of-bounds Write: The i686 variant lagged at ffmpeg 5.1.4 while x86_64 was already on 8.x, a multi-major-version gap that accumulated many unpatched OOB write flaws; the fix jumped to 8.1.1.
Out-of-bounds Write: ffmpeg 5.1.3 and unpinned libvpx master carried known OOB write vulnerabilities; the fix bumped ffmpeg to 5.1.4 and pinned libvpx to v1.13.1, showing that both the version and the pinning strategy matter.