ChurchCRM/CRM
master@ 29c8e6eFixes80
CVEs112
Peak severityCritical
Commits11,883
Regression coverage12.0%
Highlights
Cross-Site Scripting: 33 prior fixes. Scrutinize any change in this area.
src/EventEditor.php: most-fixed (6 issues). Treat as high-risk during review.
70 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
SQL Injection: 4 historical fix(es) link src/EventEditor.php to SQL Injection.
SQL Injection: 2 historical fix(es) link src/ChurchCRM/Service/FinancialService.php to SQL Injection.
Authorization Bypass: 2 historical fix(es) link src/api/routes/people/people-person.php to Authorization Bypass.
Last analyzed 7 Oct 2026, 16:59 UTC