Highlights
Cross-Site Request Forgery: 1 prior fix. Scrutinize any change in this area.
tornado/web.py: most-fixed (3 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cross-Site Request Forgery: 1 historical fix(es) link tornado/web.py to Cross-Site Request Forgery.
Denial of Service: 1 historical fix(es) link tornado/websocket.py to Denial of Service.
Path Traversal: 1 historical fix(es) link tornado/web.py to Path Traversal.