I'm passing along a lightly-edited announcement from the Red Hat Bugzilla admins. You may have noticed this change already. The short version is that the search API now defaults to returning 20 bugs, but authenticated calls can request up to 1000.
More details are on the Community Blog: https://communityblog.fedoraproject.org/changes-to-bugzilla-queries/
devel-announce@lists.fedoraproject.org