Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
pymodbus-dev/pymodbus
dev @ 25e72e8
3
Fixes
0
CVEs
HIGH
Peak severity
66.7%
Coverage
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
pymodbus.datastore: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Processing short Modbus TLS frames without validating minimum length constraints triggers unhandled index out-of-range exceptions, crashing the communication channel.
Denial of Service: An attacker can cause unbounded memory consumption and potential crash by sending continuous stream data without resetting the internal receive buffer when it exceeds safety limits.
Denial of Service: Querying negative or out-of-bounds register addresses triggers unhandled exceptions within datastore blocks instead of returning a clean Modbus illegal address error code, halting execution.