Highlights
SQL Injection: 4 prior fixes. Scrutinize any change in this area.
lib/api/xmlrpc/v1/xmlrpc.class.php: most-fixed (2 issues). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Authorization Bypass: 2 historical fix(es) link lib/api/xmlrpc/v1/xmlrpc.class.php to Authorization Bypass.
Cross-Site Scripting: 1 historical fix(es) link lib/attachments/attachmentdownload.php to Cross-Site Scripting.
SQL Injection: 1 historical fix(es) link lib/functions/testproject.class.php to SQL Injection.