This assumes we don't create other bugs/vulnerabilities while fixing the existing ones.