Highlights
Privilege Escalation: 1 prior fix. Scrutinize any change in this area.
src/rpc/api.rs: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Privilege Escalation: External RPC callers could bypass transaction validation or queue limits by inheriting privileged local status because the transaction origin parameter was hardcoded to 'Local' instead of forwarding the actual origin.