Highlights
Input Validation: 2 prior fixes. Scrutinize any change in this area.
src/Collection.php: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Input Validation: Namespace injection via '.' and NUL bytes in database/collection names can alter the target namespace and bypass authorization checks. Both historical fixes address this exact issue, indicating it is the primary known weakness.