CommitWatch RSS
Continuous public-repository analysis

Open source.
Not open secrets.

We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.

Explore the watch feed ↓See how scoring works →
23Projects watched
16908Commits captured
16839AI analyses
83High-risk findings · 30d
The watch feed

Changes worth understanding

AI analysis is published as generated. Community notes appear after human validation.

16839 analyses
Highest risk·RSS
Moderate 59 AI analysisMessage 82 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(crypto): add missing checks for negative VLA size

This commit fixes two functions in Trezor's base58 code that build temporary memory buffers using a user-supplied length. Before the fix, a negative length value was not rejected. On systems where negative signed integers are treated as ve…

Missing negative-length validation before variable-length array allocationPotential stack-based buffer overflow or allocation failure from signed/unsigned conversionExternal security reporter credited (Amr)
3f193183by M1nd3r+2−21 file
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 77 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(ci): applying zizmor findings to UI flows workflow [no changelog]

This commit tightens two GitHub Actions workflow files that run translation-related UI tests. It moves broad workflow-level AWS login permission down to only the specific jobs that need it, stops Git from keeping reusable login credentials…

Workflow permission scope reduction (id-token: write moved to job level)actions/checkout persist-credentials: false addedUser-controlled workflow input (inputs.languages) moved to environment variable before shell interpolation
2752c296by Michal Kazda+19−92 files
No security note in commit
Open full analysis →Source commit ↗
Informational 17 AI analysisMessage 91 · Strong
EP Elements ProjectCore Lightning BitcoinLightning Network

pyln-testing: wait for listen port release before starting a node

This is a testing-framework fix, not a fix in the Core Lightning node software itself. It stops automated tests from failing when a background process (connectd) is slow to release a network port after a node restart. There is no direct se…

No security-relevant code change in production daemonFixes a test-framework race condition, not an exploit primitiveNo input validation, cryptography, or authorization changes
1136b217by Ken Sedgwick+38−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

docs(python): regenerate OPTIONS.rst

This commit only updates a documentation file (OPTIONS.rst) to reflect a new command-line option (`--display-format`) that was already added elsewhere in the project. It is a documentation-only change with no code modifications and no secu…

72e2d061by M1nd3r+4−31 file
No security note in commit
Open full analysis →Source commit ↗
Low 27 AI analysisMessage 68 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

rpc: reject empty node argument in addnode

This change fixes a minor bug in Bitcoin Core's RPC command `addnode`. Previously, if a user passed an empty or whitespace-only address, Bitcoin Core would add it to its persistent 'try to connect' list and keep retrying forever, even thou…

Input validation hardening for RPC parameterPrevention of resource-wasting infinite retry loopFunctional test coverage added for malformed input
90ce21e2by w0xlt+11−02 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 63 · Adequate
LDK Lightning Dev Kitrust-lightning BitcoinCryptographic librariesLightning Network

Require manual reviewer assignment

This commit changes the project's internal code-review workflow. It stops automatically assigning a human reviewer when a pull request is opened; instead, contributors must manually click a button to request a reviewer after first addressi…

9c1e5787by Joost Jager+21−232 files
No security note in commit
Open full analysis →Source commit ↗
Informational 12 AI analysisMessage 77 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): do not preallocate known addresses

This commit is a code cleanup in Trezor's Ethereum app. It replaces a pre-built lookup table of known smart-contract addresses with a generated template and a helper function that searches the same data on demand. The visible behavior—such…

No change to address/chain-id matching logicNo new untrusted input parsingNo memory-unsafe operations introduced
2e67a22fby obrusvit+226−1454 files
No security note in commit
Open full analysis →Source commit ↗
Informational 22 AI analysisMessage 80 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

init: ignore empty addnode values

This change fixes a minor startup bug in Bitcoin Core where an empty -addnode setting (for manually adding network peers) would create a useless peer record that the software tried to connect to over and over. Now empty or whitespace-only …

Denial-of-service hardening: prevents indefinite retry loop against an invalid added-node targetInput validation added for command-line/config argumentLogging added for ignored invalid input
69465de4by w0xlt+29−22 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 77 · Adequate
EL ElectrumElectrum BitcoinSoftware wallets

ci: bump security review ci model to opus 5

This commit simply changes the version string of an AI model used by an internal continuous-integration (CI) security-review script. It does not modify Electrum wallet code, cryptography, networking, or any user-facing behavior. There is n…

1334146dby Felix+1−11 file
No security note in commit
Open full analysis →Source commit ↗
Low 36 AI analysisMessage 28 · Opaque
KS KeystoneKeystone 3 firmware BitcoinHardware wallets

support sol cli

This commit adds Solana CLI support to the Keystone 3 hardware wallet firmware. It introduces a new USB command that lets a connected computer request public keys for specific Solana derivation paths, and it reworks how USB responses are s…

New USB command exposes public-key export for a specific coin type and derivation pathAdded NULL/empty checks before returning generated UR data and before using cached passwordMoved several UR result sends from synchronous to asynchronous (task-queue based) dispatch
77833f49by ww3512687+282−2016 files
No security note in commit
Open full analysis →Source commit ↗
Informational 21 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(common): add network definition support for `EthereumSignAuth7702`

This commit adds an optional 'definitions' field to the EthereumSignAuth7702 message used in Trezor's firmware. This field lets the device receive extra network information (like chain details) alongside an authorization request. The chang…

Adds optional network-definition payload to an experimental signing message (EIP-7702 authorization)No validation or trust-boundary logic shown in the diffGenerated protobuf code only; implementation behavior is not visible here
32d06df3by Roman Zeyde+43−114 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 28 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update API files

This commit only updates generated text files that list the public API of the crate. The change records that the Opcode type now implements the Hash trait, which is a normal, additive feature addition. There is no code change, no bug fix, …

a487f942by Mitchell Bagot+6−03 files
No security note in commit
Open full analysis →Source commit ↗
01
Why commit watching?

Security should leave a paper trail.

A quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.

Why we built this →