Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

prysmaticlabs/prysm

              develop @ 9806e3f
            

118

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 31 prior fixes. Scrutinize any change in this area.

beacon-chain/rpc/prysm/v1alpha1/validator/proposer_bellatrix.go: most-fixed (8 issues). Treat as high-risk during review.

86 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes address authentication bypasses in the validator RPC layer, including token comparison timing, JWT signing method validation, path exemption logic, and logout invalidation. This surface has been repeatedly exploited, indicating a high-risk area for authentication logic.

Signature Verification Bypass: Numerous fixes address missing or incorrect signature verification in block processing, attestation handling, and builder bid validation. These include wrong domain constants, stale fork data, and skipped verification in no-verify paths, allowing forged or invalid signatures to be accepted.

Consensus Safety: Fixes address consensus safety issues such as incorrect fork-choice viability checks, missing payload/header root comparisons, and stale head usage during block proposal. These could lead to invalid head selection or acceptance of mismatched builder payloads.