Highlights
Authorization Bypass: 11 prior fixes. Scrutinize any change in this area.
internal/http/providers.go: most-fixed (3 issues). Treat as high-risk during review.
22 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
SSRF: 3 historical fix(es) link internal/http/providers.go to SSRF.
Authorization Bypass: 2 historical fix(es) link internal/http/builtin_tools.go to Authorization Bypass.
Authorization Bypass: 2 historical fix(es) link internal/gateway/methods/chat.go to Authorization Bypass.