Highlights
Path Traversal: 1 prior fix. Scrutinize any change in this area.
tools/heal.py: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: The tool accepts LLM-generated entity names to write files, which previously allowed directory traversal outside of the intended base directory if malicious or unexpected paths were returned by the model. Developers must ensure path canonicalization and strict prefix checks are consistently applied prior to write operations.