Authentication Bypass: Multiple fixes across grid components address missing or weak registration secret enforcement, including a non-constant-time comparison and a missing secret in Hub. This is the highest-volume recurring risk, indicating a systemic gap in secret propagation and validation.

Path Traversal: Multiple fixes address zip-slip and tar/pkg traversal in different languages and components, indicating a recurring failure to sanitize archive entry names before writing files.

Arbitrary Code Execution: Multiple dependency upgrades were needed to fix code execution vulnerabilities in documentation generation and JavaScript engines, indicating a need for continuous dependency scanning and updates.