main@ a000f85Fixes11
CVEs0
Peak severityCritical
Commits3,318
Regression coverage14.3%
Highlights
Cross-Site Request Forgery: 3 prior fixes. Scrutinize any change in this area.
Mage_Admin_Model_Observer: most-fixed (1 issue). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 1 historical fix(es) link app/code/core/Mage/Adminhtml/Controller/Action.php to Authorization Bypass.
Unsafe Deserialization: 1 historical fix(es) link app/code/core/Mage/Adminhtml/controllers/DashboardController.php to Unsafe Deserialization.
Authorization Bypass: 1 historical fix(es) link Multiple, components to Authorization Bypass.
Last analyzed 30 Sep 2026, 02:53 UTC