Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rsksmart/2wp-api
main @ 556fe77
3
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Denial of Service: 1 prior fix. Scrutinize any change in this area.
src/controllers/addresses-info.controller.ts: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Oversized address-list requests can exhaust resources; the fix added max items, max rows, and concurrency limits, indicating the endpoint historically accepted unbounded input.
Input Validation: Malformed transaction IDs were accepted and could be exploited; strict schema validation was added to reject invalid inputs.
Information Disclosure: Invalid addresses could lead to data exposure; the fix added address validation and classification, implying the endpoint previously processed unvalidated addresses.