Highlights
Reflected XSS: 1 prior fix. Scrutinize any change in this area.
folium: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Reflected XSS: Historical vulnerability where unescaped variables or raw string interpolation in Jinja2 HTML/JS templates allowed arbitrary script execution. Attackers can leverage parameters loaded into map components to trigger XSS if output encoding is bypassed.