| Improper Encoding or Escaping of Output | |
| Integer Underflow | |
| Insufficiently Protected Credentials | |
| Insufficiently Protected Credentials | |
| Uncaught Exception | |
| Link Following | |
| Link Following | |
| Incorrect Calculation of Buffer Size | |
| Out-of-bounds Read | |
| Improper Certificate Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Directory Traversal | |
| Incorrect Conversion between Numeric Types | |
| Arbitrary Command Injection | |
| Link Following | |
| CVE-2026-6654 | |
| Incorrect Calculation of Multi-Byte String Length | |
| Link Following | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Numeric Truncation Error | |
| Uncontrolled Recursion | |