| Link Following | |
| Out-of-bounds Read | |
| Deadlock | |
| Improperly Implemented Security Check for Standard | |
| Asymmetric Resource Consumption (Amplification) | |
| Allocation of Resources Without Limits or Throttling | |
| Directory Traversal | |
| Deserialization of Untrusted Data | |
| Cross-site Scripting (XSS) | |
| Deserialization of Untrusted Data | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Authentication Bypass | |
| Permissive Whitelist | |
| Allocation of Resources Without Limits or Throttling | |
| Algorithmic Complexity | |
| Allocation of Resources Without Limits or Throttling | |
| Link Following | |
| Deserialization of Untrusted Data | |
| Race Condition | |
| Asymmetric Resource Consumption (Amplification) | |
| Use After Free | |
| Out-of-bounds Write | |
| Uncontrolled Recursion | |
| Improperly Controlled Sequential Memory Allocation | |
| Algorithmic Complexity | |
| Origin Validation Error | |
| Integer Overflow or Wraparound | |
| Origin Validation Error | |
| Inclusion of Functionality from Untrusted Control Sphere | |
| HTTP Request Smuggling | |
| Out-of-bounds Write | |
| HTTP Request Smuggling | |
| Algorithmic Complexity | |
| Algorithmic Complexity | |
| Link Following | |
| Weak Password Recovery Mechanism for Forgotten Password | |
| Link Following | |
| Information Exposure | |
| Out-of-bounds Write | |
| Heap-based Buffer Overflow | |
| Allocation of Resources Without Limits or Throttling | |
| Unchecked Input for Loop Condition | |
| Out-of-bounds Write | |
| Integer Overflow or Wraparound | |
| Use After Free | |
| Arbitrary Code Injection | |
| Heap-based Buffer Overflow | |
| Unchecked Return Value | |
| Protection Mechanism Failure | |
| Origin Validation Error | |
| Heap-based Buffer Overflow | |
| Heap-based Buffer Overflow | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| HTTP Request Smuggling | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Heap-based Buffer Overflow | |
| Heap-based Buffer Overflow | |
| Insufficient Verification of Data Authenticity | |
| Link Following | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Validation of Specified Type of Input | |
| Improper Encoding or Escaping of Output | |
| Allocation of Resources Without Limits or Throttling | |
| Authentication Bypass | |
| LDAP Injection | |
| CVE-2026-56158 | |
| Deserialization of Untrusted Data | |
| Arbitrary Code Injection | |
| Deserialization of Untrusted Data | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Stack-based Buffer Overflow | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Implementation of Authentication Algorithm | |
| Allocation of Resources Without Limits or Throttling | |
| Link Following | |
| Resource Exhaustion | |
| Improper Authorization | |
| Improper Input Validation | |
| Improper Input Validation | |
| Directory Traversal | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improper Input Validation | |
| Protection Mechanism Failure | |
| Improper Neutralization of Special Elements | |
| Resource Exhaustion | |
| Out-of-bounds Read | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Handling of Missing Special Element | |
| HTTP Request Smuggling | |
| Inadequate Encryption Strength | |
| Link Following | |
| Untrusted Search Path | |
| CVE-2025-24070 | |
| Allocation of Resources Without Limits or Throttling | |
| Buffer Over-read | |
| Heap-based Buffer Overflow | |
| CVE-2025-21173 | |
| CVE-2025-21172 | |
| External Control of File Name or Path | |
