Highlights
Information Disclosure: 1 prior fix. Scrutinize any change in this area.
src/sources/store.ts: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Source file operations (read/write/delete) previously allowed traversal and symlink escapes, enabling unauthorized file access or deletion; this is the most severe historical issue.
Information Disclosure: The /api/health endpoint leaked absolute paths to network clients, exposing internal filesystem layout; medium severity because it aids reconnaissance but does not directly modify data.