Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

safe-global/safe-wallet-monorepo

              dev @ ad44ac3
            

Fixes

CVEs

HIGH

Peak severity

21.2%

Coverage

Highlights

Auth Bypass: 33 prior fixes. Scrutinize any change in this area.

GitHub: most-fixed (4 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Active transaction signing was vulnerable to signing credentials against mismatched Safe or chain contexts because the active domain validation was missing at sign-time. Developers must explicitly assert context matches of the active Safe and chain against draft transactions.

Sandbox Escape: Third-party Safe Apps were loaded inside iframes without proper sandbox restrictions, allowing potential execution of arbitrary script or unintended interaction with the parent page. Strict minimal sandbox flags are required.

DOM-Based XSS: Failing to validate the protocol scheme of Safe App iframe sources allowed injection of javascript: URIs leading to client-side code execution. Sources must be restricted to http or https.