Highlights
Authentication Bypass: 10 prior fixes. Scrutinize any change in this area.
api/_cors.js: most-fixed (4 issues). Treat as high-risk during review.
55 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Authentication Bypass: 2 historical fix(es) link api/_cors.js to Authentication Bypass.
SSRF: 2 historical fix(es) link api/mcp-proxy.ts to SSRF.
Authentication Bypass: 1 historical fix(es) link src-tauri/sidecar/local-api-server.mjs to Authentication Bypass.