Highlights
Authorization Bypass: 9 prior fixes. Scrutinize any change in this area.
synapse/api/auth.py: most-fixed (3 issues). Treat as high-risk during review.
27 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Authorization Bypass: 3 historical fix(es) link synapse/api/auth.py to Authorization Bypass.
Authorization Bypass: 2 historical fix(es) link synapse/handlers/federation.py to Authorization Bypass.
Information Disclosure: 2 historical fix(es) link synapse/federation/federation_server.py to Information Disclosure.