Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
pkg/server/http_server.go: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Inadequate secret-key validation on deregistration endpoints allows unauthorized remote attackers to terminate active client sessions, disrupting service availability and monitoring capabilities. Developers must ensure all state-tearing operations validate the client's registered secret key before modifying storage state.