Denial of Service: 17 fixes across tokenizers and rules, including stack overflows, index-out-of-bounds, ReDoS, and resource leaks, indicate pervasive input-length and bounds validation gaps.

Auth Bypass: Multiple fixes to JWT token verification, referrer allowlist, and trusted-source checks indicate logic errors that could grant premium or remote-rule access to unauthorized users.

XML External Entity (XXE): Two separate SAXParser instances were patched to disable external DTDs, indicating a systemic risk in XML rule loading that could allow file disclosure or SSRF.