| HTTP Request Smuggling | |
| Cross-site Scripting (XSS) | |
| Race Condition | |
| Allocation of Resources Without Limits or Throttling | |
| Link Following | |
| Allocation of Resources Without Limits or Throttling | |
| HTTP Request Smuggling | |
| Missing Release of Resource after Effective Lifetime | |
| Cross-site Scripting (XSS) | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Excessive Platform Resource Consumption within a Loop | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Unchecked Input for Loop Condition | |
| NULL Pointer Dereference | <3:2.1.10-1.module+el8.10.0+24510+6ea3880e |
| Information Exposure | |
| Missing Release of Resource after Effective Lifetime | |
| Integer Overflow or Wraparound | |
| Improper Certificate Validation | <3:2.1.10-1.module+el8.10.0+24482+e50f4e4f |
| Improper Preservation of Permissions | <3:2.1.10-1.module+el8.10.0+24482+e50f4e4f |
| Missing Release of Resource after Effective Lifetime | <3:2.1.10-1.module+el8.10.0+24482+e50f4e4f |
| Improper Validation of Specified Quantity in Input | <3:2.1.10-1.module+el8.10.0+24482+e50f4e4f |
| Incorrect Calculation of Buffer Size | <3:2.1.10-1.module+el8.10.0+24482+e50f4e4f |
| Improper Control of Dynamically-Identified Variables | <3:2.1.10-1.module+el8.10.0+24510+6ea3880e |
| Creation of Immutable Text Using String Concatenation | <3:2.1.10-1.module+el8.10.0+24790+ef71b018 |
| Cross-site Scripting (XSS) | |
| External Control of Assumed-Immutable Web Parameter | |
| Time-of-check Time-of-use (TOCTOU) | |
| Improper Output Neutralization for Logs | |
| Improper Validation of Unsafe Equivalence in Input | |
| CVE-2026-33811 | <3:2.1.10-1.module+el8.10.0+24510+6ea3880e |
| HTTP Request Smuggling | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| Out-of-bounds Read | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Validation of Syntactic Correctness of Input | |
| Improper Certificate Validation | |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+24081+a04d358a |
| Improper Certificate Validation | <3:2.1.10-1.module+el8.10.0+24081+a04d358a |
| Directory Traversal | |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+24081+a04d358a |
| Improper Handling of Unexpected Data Type | <3:2.1.10-1.module+el8.10.0+23863+d7fda2d7 |
| Allocation of Resources Without Limits or Throttling | |
| Improper Certificate Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Out-of-bounds Read | |
| Excessive Platform Resource Consumption within a Loop | <3:2.1.10-1.module+el8.10.0+23963+b64d8032 |
| Resource Exhaustion | <3:2.1.10-1.module+el8.10.0+23963+b64d8032 |
| Missing Reference to Active Allocated Resource | |
| Reachable Assertion | |
| Creation of Temporary File With Insecure Permissions | <3:2.1.10-1.module+el8.10.0+23498+f7d19d48 |
| Link Following | <3:2.1.10-1.module+el8.10.0+23820+ae6deecc |
| Link Following | <3:2.1.10-1.module+el8.10.0+23647+cfd78660 |
| Link Following | <3:2.1.10-1.module+el8.10.0+23647+cfd78660 |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+23772+e5018371 |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Output Neutralization for Logs | |
| Expected Behavior Violation | |
| Expected Behavior Violation | |
| Incorrect Resource Transfer Between Spheres | <3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Directory Traversal | <3:2.1.10-1.module+el8.10.0+23498+f7d19d48 |
| Allocation of Resources Without Limits or Throttling | |
| Time-of-check Time-of-use (TOCTOU) | |
| Improper Certificate Validation | <3:2.1.10-1.module+el8.10.0+23320+f7205097 |
| Information Exposure | |
| Improper Validation of Array Index | <2:2.1.0-1.module+el8.6.0+14673+621cb8be |
| Improper Certificate Validation | <2:2.0.15-1.module+el8.3.0+10188+4c10031c |
| HTTP Request Smuggling | <3:2.1.10-1.module+el8.10.0+23250+94af2c8e |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+22931+799fd806 |
| Improper Input Validation | |
| Improper Privilege Management | <3:2.1.10-1.module+el8.10.0+22417+2fb00970 |
| Directory Traversal | <3:2.1.10-1.module+el8.10.0+22397+e3c95ba6 |
| Improper Input Validation | <3:2.1.10-1.module+el8.10.0+22397+e3c95ba6 |
| Link Following | <3:2.1.10-1.module+el8.10.0+22397+e3c95ba6 |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.10-1.module+el8.10.0+22346+28c02849 |
| Uncontrolled Recursion | <3:2.1.10-1.module+el8.10.0+22346+28c02849 |
| Uncontrolled Recursion | <3:2.1.10-1.module+el8.10.0+22346+28c02849 |
| Directory Traversal | <3:2.1.10-1.module+el8.10.0+22417+2fb00970 |
| Binding to an Unrestricted IP Address | <3:2.1.10-1.module+el8.10.0+22417+2fb00970 |
| Information Exposure | |
| Improper Verification of Cryptographic Signature | |
| Information Exposure | |
| Improper Input Validation | <3:2.1.10-1.module+el8.10.0+22283+6d6d094a |
| Information Exposure Through Log Files | <3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Improper Input Validation | <3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Improper Check for Unusual or Exceptional Conditions | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Truncation of Security-relevant Information | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Information Exposure | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Improper Input Validation | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Resource Exhaustion | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Information Exposure | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Loop with Unreachable Exit Condition ('Infinite Loop') | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Improper Validation of Integrity Check Value | <3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | <3:2.1.10-1.module+el8.10.0+22283+6d6d094a |
| Link Following | <3:2.1.8-1.module+el8.9.0+21697+6a5e98e7 |
| Memory Leak | <3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Improper Handling of Highly Compressed Data (Data Amplification) | <3:2.1.10-1.module+el8.10.0+21962+8143777b |
| Resource Exhaustion | <3:2.1.10-1.module+el8.10.0+21962+8143777b |
| Misinterpretation of Input | <3:2.1.10-1.module+el8.10.0+22283+6d6d094a |
| Improper Input Validation | <3:2.1.10-1.module+el8.10.0+22346+28c02849 |
| Arbitrary Code Injection | <3:2.1.10-1.module+el8.10.0+23963+b64d8032 |
| Improper Certificate Validation | <3:2.1.10-1.module+el8.10.0+22283+6d6d094a |
| Information Exposure | <3:2.1.8-1.module+el8.9.0+21243+a586538b |
| Resource Exhaustion | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Information Exposure | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Resource Exhaustion | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Cross-site Scripting (XSS) | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| HTTP Response Splitting | <2:2.1.4-2.module+el8.9.0+20325+b2853e6e |
| Authentication Bypass by Primary Weakness | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Path Equivalence | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Incorrect Default Permissions | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Placement of User into Incorrect Group | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Buffer Access with Incorrect Length Value | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Cross-site Scripting (XSS) | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Cross-site Scripting (XSS) | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Improper Handling of Unicode Encoding | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Improper Handling of Unicode Encoding | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Improper Handling of Unicode Encoding | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Resource Exhaustion | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Arbitrary Code Injection | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Resource Exhaustion | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Resource Exhaustion | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Resource Exhaustion | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Resource Exhaustion | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Time-of-check Time-of-use (TOCTOU) | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Resource Exhaustion | <3:2.1.8-1.module+el8.9.0+19761+326da906 |
| Allocation of Resources Without Limits or Throttling | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| CVE-2022-41715 | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Allocation of Resources Without Limits or Throttling | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| HTTP Request Smuggling | <3:2.1.10-1.module+el8.10.0+21077+98b84d8a |
| Resource Exhaustion | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Placement of User into Incorrect Group | <3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Placement of User into Incorrect Group | <2:2.1.4-1.module+el8.8.0+17821+de1b53f1 |
| Resource Exhaustion | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Information Exposure | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Improperly Controlled Sequential Memory Allocation | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| HTTP Request Smuggling | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Incorrect Default Permissions | <2:2.1.4-1.module+el8.7.0+16520+2db5507d |
| Insufficient Entropy | <3:2.1.6-1.module+el8.8.0+18098+9b44df5f |
| Allocation of Resources Without Limits or Throttling | <2:2.1.4-1.module+el8.7.0+16520+2db5507d |
| Improper Preservation of Permissions | <2:2.1.0-1.module+el8.6.0+14673+621cb8be |
| Incorrect Default Permissions | <2:2.0.26-1.module+el8.6.0+14694+4f5132e0 |
| Incorrect Default Permissions | <2:2.0.15-1.module+el8.5.0+14796+e4386a39 |
| Incorrect Default Permissions | <2:2.0.15-1.module+el8.5.0+14796+e4386a39 |
| Missing Release of Resource after Effective Lifetime | <2:2.0.26-3.module+el8.7.0+16212+65e1b35f |
| Use of a Broken or Risky Cryptographic Algorithm | <2:2.1.4-1.module+el8.7.0+16520+2db5507d |
| Access of Resource Using Incompatible Type ('Type Confusion') | <3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Race Condition | <3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Time-of-check Time-of-use (TOCTOU) | <2:2.0.26-3.module+el8.4.0+11311+9da8acfb |
| Origin Validation Error | <2:2.0.26-1.module+el8.4.0+10607+f4da7515 |
| Improper Cross-boundary Removal of Sensitive Data | <2:2.0.22-3.module+el8.3.1+9857+68fb1526 |
| Man-in-the-Middle (MitM) | <2:2.0.20-2.module+el8.3.0+8221+97165c3f |
| Loop with Unreachable Exit Condition ('Infinite Loop') | <2:2.0.20-2.module+el8.3.0+8221+97165c3f |
| Incorrect Authorization | <2:2.0.17-1.module+el8.2.1+6771+3533eb4c |
| Directory Traversal | <2:2.0.6-1.module+el8.2.0+6369+1f4293b4 |
| Path Equivalence | <2:2.0.6-1.module+el8.2.0+5182+3136e5d4 |
| Files or Directories Accessible to External Parties | <2:2.0.6-1.module+el8.2.0+5182+3136e5d4 |
| Resource Exhaustion | <2:2.0.6-1.module+el8.2.0+5182+3136e5d4 |
| Heap-based Buffer Overflow | <2:2.0.6-1.module+el8.1.1+5259+bcdd613a |
| Heap-based Buffer Overflow | <2:2.0.6-1.module+el8.1.1+5259+bcdd613a |
| Use After Free | <2:2.0.6-1.module+el8.1.1+5259+bcdd613a |
| Use After Free | <2:2.0.17-1.module+el8.2.1+6771+3533eb4c |
| NULL Pointer Dereference | <2:2.0.26-1.module+el8.4.0+10607+f4da7515 |
| Out-of-bounds Read | <2:2.0.20-2.module+el8.3.0+8221+97165c3f |
| Information Exposure | <2:2.0.26-1.module+el8.5.0+10306+3f72d66d |
| Improper Locking | <2:2.0.29-1.module+el8.5.0+12582+56d94c81 |
