Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

python-hyper/hyperframe

              master @ 632e309
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Denial of Service: 2 prior fixes. Scrutinize any change in this area.

hyperframe/frame.py: most-fixed (3 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Insufficent frame length and window increment validation in HTTP/2 WINDOW_UPDATE frames, as well as weak body length checks in PRIORITY frames, can lead to parser crashes or unexpected behavior.

Protocol Violation: Improper validation of the promised stream identifier in PUSH_PROMISE frames could allow violations of the HTTP/2 specification, leading to downstream connection synchronization issues.