Highlights
Path Traversal: 1 prior fix. Scrutinize any change in this area.
src/sources/store.ts: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Insecure handling of user-controlled paths allowed attackers to traverse directories and read arbitrary files on the system via the storage source APIs. This was mitigated by adding path canonicalization and verification of an allowed path prefix.