Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
paritytech/parity-bridges-common
master @ 4f6871c
9
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Auth Bypass: 8 prior fixes. Scrutinize any change in this area.
modules/call-dispatch/src/lib.rs: most-fixed (2 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Signature verification can be bypassed if the signature digest is computed over incorrectly structured or partially decoded bytes (such as raw encoded bytes containing length prefixes) rather than the fully decoded call structure.
Signature Replay: Signatures can be replayed across different runtime versions and target chains if the signed ownership digest lacks contextual bindings like the target spec version and source bridge ID.
Auth Bypass: Weaknesses in GRANDPA justification verification could allow malicious or duplicate authority votes to pass cumulative weight validation during block finality checks.