I think that's just that your test bug really does only have one needinfo flag remaining. https://api-dev.bugzilla.mozilla.org/latest/bug/862233/flag shows two flags just fine. Also Scrumbugs uses the XMLRPC API as the REST one is indeed buggy.