commercial-gitlab-rails-ee-19.3

Direct Vulnerabilities

Known vulnerabilities in the commercial-gitlab-rails-ee-19.3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-78669	<19.3.4-r0
L CVE-2026-78659	<19.3.4-r0
L CVE-2026-97032	<19.3.4-r0
L CVE-2026-78663	<19.3.4-r0
L CVE-2026-78660	<19.3.4-r0
L Resource Exhaustion	<19.3.3-r4
L GHSA-2v4p-qf9q-27wj	<19.3.3-r4
L GHSA-pg57-6jwg-q645	<19.3.3-r4
L Improper Validation of Array Index	<19.3.3-r4
L GHSA-7jxh-36q5-gcqv	<19.3.3-r4
L GHSA-8wmf-6v46-5gfg	<19.3.3-r4
L Improper Authentication	<19.3.3-r4
L GHSA-mvxr-6m87-mv2q	<19.3.3-r4
L Information Exposure	<19.3.3-r4
L GHSA-m6vc-f87m-cc2h	<19.3.3-r4
L GHSA-xv9c-mjw8-79gf	<19.3.3-r4
L Resource Exhaustion	<19.3.3-r4
L CVE-2025-67202	<19.3.3-r4
L Interpretation Conflict	<19.3.3-r4
L GHSA-4hqw-qxg8-jxx2	<19.3.3-r1
L GHSA-73wf-gq98-2v4g	<19.3.3-r1
L GHSA-vh66-26gq-q6x8	<19.3.3-r1
M HTTP Response Splitting	<19.3.3-r1
L Protection Mechanism Failure	<19.3.3-r1
L GHSA-f577-qrjj-4474	<19.3.3-r1
L GHSA-6688-9rhm-gjv2	<19.3.3-r1
L CVE-2026-6322	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L GHSA-jqff-g426-hqxp	<19.3.3-r1
L GHSA-4cwx-7wf7-3272	<19.3.3-r1
L CVE-2026-18540	<19.3.3-r1
L GHSA-2883-xcg3-v3hh	<19.3.3-r1
L Integer Overflow or Wraparound	<19.3.3-r1
L GHSA-hvrm-45r6-mjfj	<19.3.3-r1
L GHSA-238p-pmpm-9mq7	<19.3.3-r1
L Arbitrary Code Injection	<19.3.3-r1
L GHSA-m8rv-5g2x-5cg5	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
M CVE-2026-85008	<19.3.3-r1
L CVE-2026-45249	<19.3.4-r0
L Resource Exhaustion	<19.3.3-r1
M CVE-2026-84947	<19.3.3-r1
L GHSA-p98j-92pf-mc4p	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L GHSA-fx2h-pf6j-xcff	<19.3.3-r1
L GHSA-p9ff-h696-f583	<19.3.3-r1
L CVE-2026-84890	<19.3.3-r1
L GHSA-m8m8-qj5v-23w3	<19.3.3-r1
L GHSA-2gqq-gqf2-x968	<19.3.3-r1
L CVE-2026-82562	<19.3.3-r1
M CVE-2026-16729	<19.3.3-r1
L GHSA-hm8q-7f3q-5f36	<19.3.3-r1
L GHSA-rgw5-rvv9-x895	<19.3.3-r1
L GHSA-9vqf-7f2p-gf9v	<19.3.3-r1
L CVE-2026-19484	<19.3.3-r1
L GHSA-6623-4q32-82v8	<19.3.3-r1
H Improper Validation of Specified Quantity in Input	<19.3.3-r1
L CVE-2026-102422	<19.3.3-r1
L GHSA-3pq3-5fj3-cg6v	<19.3.3-r1
L Arbitrary Code Injection	<19.3.3-r1
L CVE-2026-12590	<19.3.3-r1
L GHSA-82fw-gwwq-j7x9	<19.3.3-r1
H Improper Verification of Cryptographic Signature	<19.3.3-r1
M Improper Resource Shutdown or Release	<19.3.3-r1
L GHSA-j8rh-479h-cp32	<19.3.3-r1
L GHSA-2gcr-mfcq-wcc3	<19.3.3-r1
L Allocation of Resources Without Limits or Throttling	<19.3.3-r1
M CVE-2026-15157	<19.3.3-r1
L Improper Validation of Specified Quantity in Input	<19.3.3-r1
L GHSA-6fw5-9hq8-w87g	<19.3.3-r1
L CVE-2026-90711	<19.3.3-r1
L GHSA-c83g-rgw3-j3cx	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-qx2v-qp2m-jg93	<19.3.3-r1
L GHSA-gqvv-2mrq-wpjv	<19.3.3-r1
H CVE-2026-84933	<19.3.3-r1
L Insufficient Comparison	<19.3.3-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<19.3.3-r1
L GHSA-wgpf-jwqj-8h8p	<19.3.3-r1
L GHSA-58mr-gqgx-xq4g	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L CVE-2024-9506	<19.3.3-r1
L CVE-2026-76172	<19.3.3-r1
L GHSA-xjh9-v7x6-24jw	<19.3.3-r1
L GHSA-8j4g-w8fx-2239	<19.3.3-r1
M CVE-2026-16728	<19.3.3-r1
L GHSA-6qxp-vccf-f47h	<19.3.3-r1
L CVE-2026-102414	<19.3.3-r1
L GHSA-h3mg-xc3c-68pw	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L Overly Permissive Cross-domain Whitelist	<19.3.3-r1
L GHSA-pmjh-fq2x-6v4x	<19.3.3-r1
L GHSA-v39h-62p7-jpjc	<19.3.3-r1
L Cross-site Scripting (XSS)	<19.3.3-r1
L GHSA-qp7p-654g-cw7p	<19.3.3-r1
L CVE-2026-45822	<19.3.3-r1
L GHSA-rj75-hqrm-r3gf	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-7p8r-x3mc-p8w7	<19.3.3-r1
L Use of Less Trusted Source	<19.3.3-r1
L GHSA-f23p-vx2j-j53r	<19.3.3-r1
L Uncaught Exception	<19.3.3-r1
M Improper Authorization	<19.3.3-r1
L GHSA-r53p-7pc4-xj5r	<19.3.3-r1
L CVE-2026-9679	<19.3.3-r1
L GHSA-rpw4-54j3-4h4q	<19.3.3-r1
L GHSA-v422-hmwv-36x6	<19.3.3-r1
L GHSA-35p6-xmwp-9g52	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<19.3.3-r1
L Information Exposure	<19.3.3-r1
H Incorrect Behavior Order: Validate Before Canonicalize	<19.3.3-r1
L GHSA-3jxr-9vmj-r5cp	<19.3.3-r1
L GHSA-vcc3-ghjq-m6fr	<19.3.3-r1
H CVE-2026-14643	<19.3.3-r1
L GHSA-fgmj-fm8m-jvvx	<19.3.4-r0
L CVE-2026-84394	<19.3.3-r1
L GHSA-c8x8-7fp4-3x9w	<19.3.3-r1
L GHSA-rx4f-c7p8-82vq	<19.3.3-r1
L GHSA-xgm2-5f3f-mvvc	<19.3.3-r1
L Incorrect Regular Expression	<19.3.3-r1
L GHSA-hxh3-vqpv-xpqv	<19.3.3-r1
L GHSA-c29m-xwm3-cm6r	<19.3.3-r1
L GHSA-52cp-r559-cp3m	<19.3.3-r1
L GHSA-r28c-9q8g-f849	<19.3.3-r1
L Inefficient Regular Expression Complexity	<19.3.3-r1
L GHSA-rv63-4mwf-qqc2	<19.3.3-r1
L HTTP Request Smuggling	<19.3.3-r1
H CVE-2026-6734	<19.3.3-r1
M Arbitrary Code Injection	<19.3.3-r1
H CVE-2026-85014	<19.3.3-r1
L GHSA-rfgv-xxqx-mfg5	<19.3.3-r1
L GHSA-jr45-8vmc-qm54	<19.3.3-r1
L Information Exposure Through Caching	<19.3.3-r1
L Algorithmic Complexity	<19.3.3-r1
L GHSA-7mx3-vvmw-hjmv	<19.3.3-r1
L GHSA-g8m3-5g58-fq7m	<19.3.3-r1
L GHSA-cp6q-959q-f8rh	<19.3.3-r1
C CVE-2026-84961	<19.3.3-r1
L GHSA-2wm5-q62r-hmrv	<19.3.3-r1
L GHSA-hp3w-g68c-fv3c	<19.3.3-r1
L CVE-2026-16221	<19.3.3-r1
L CVE-2026-9697	<19.3.3-r1
C CVE-2026-13697	<19.3.3-r1
L Server-Side Request Forgery (SSRF)	<19.3.3-r1
L Improper Input Validation	<19.3.3-r1
L GHSA-v2v4-37r5-5v8g	<19.3.3-r1
L GHSA-x97p-jq2g-jp4f	<19.3.3-r1
L GHSA-w62v-xxxg-mg59	<19.3.3-r1
H Resource Exhaustion	<19.3.3-r1
L CVE-2025-14505	<19.3.3-r1
L GHSA-86w9-cpqp-85rv	<19.3.3-r1
L GHSA-pqg4-j6r4-53mv	<19.3.3-r1
L GHSA-p88m-4jfj-68fv	<19.3.3-r1
H Use of Uninitialized Resource	<19.3.3-r1
L GHSA-mghh-pgcx-3jjj	<19.3.3-r1
L GHSA-96hv-2xvq-fx4p	<19.3.3-r1
L GHSA-28wg-ghj8-5hjv	<19.3.3-r1
L GHSA-9fr6-4gfg-395g	<19.3.3-r1
L GHSA-2gc4-cqfq-p2gv	<19.3.3-r1
L GHSA-58qx-3vcg-4xpx	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L Arbitrary Code Injection	<19.3.3-r1
L GHSA-h67p-54hq-rp68	<19.3.3-r1
L GHSA-w9m9-85wc-3x92	<19.3.3-r1
L GHSA-crvj-82cr-hjcx	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L CVE-2026-74866	<19.3.3-r1
L GHSA-jqcg-44mw-7w3h	<19.3.3-r1
L GHSA-q8mj-m7cp-5q26	<19.3.3-r1
L GHSA-v3r7-h72x-cjcm	<19.3.3-r1
L GHSA-px8p-9vwx-vf98	<19.3.3-r1
L GHSA-4x5r-pxfx-6jf8	<19.3.3-r1
L GHSA-69xw-7hcm-h432	<19.3.3-r1
L Use of Less Trusted Source	<19.3.3-r1
L CVE-2026-19481	<19.3.3-r1
L HTTP Request Smuggling	<19.3.3-r1
L GHSA-wwfh-h76j-fc44	<19.3.3-r1
L Improper Encoding or Escaping of Output	<19.3.3-r1
L Cross-site Scripting (XSS)	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
M Directory Traversal	<19.3.3-r1
L GHSA-xwg4-73v4-xw9w	<19.3.3-r1
L Race Condition	<19.3.3-r1
L GHSA-vfj7-8cjw-p6xm	<19.3.3-r1
L GHSA-gxm5-99cw-xjw9	<19.3.3-r1
L GHSA-qjx8-664m-686j	<19.3.3-r1
L Inefficient Regular Expression Complexity	<19.3.3-r1
L GHSA-j6c9-x7qj-28xf	<19.3.3-r1
L GHSA-4c8g-83qw-93j6	<19.3.3-r1
L CVE-2026-19534	<19.3.3-r1
L CVE-2026-84292	<19.3.3-r1
L GHSA-2jfj-6hjv-fm6j	<19.3.3-r1
L GHSA-8436-99hf-9mmv	<19.3.3-r1
L GHSA-v2wj-q39q-566r	<19.3.3-r1
L GHSA-54fx-42gc-7vw4	<19.3.3-r1
L CVE-2026-12151	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L GHSA-2v37-7h3g-55p8	<19.3.3-r1
L GHSA-8xcm-r25x-g524	<19.3.3-r1
L Unintended Proxy or Intermediary ('Confused Deputy')	<19.3.3-r1
L GHSA-3xpg-4rpp-hhhm	<19.3.3-r1
L CVE-2026-12143	<19.3.3-r1
M Improper Validation of Specified Quantity in Input	<19.3.3-r1
L GHSA-44g4-m2mj-wpvx	<19.3.3-r1
L CVE-2026-11525	<19.3.3-r1
L GHSA-w293-vg96-wgc3	<19.3.3-r1
L GHSA-qhr7-859c-m2p7	<19.3.3-r1
L GHSA-qw65-cvwx-89v3	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L Insufficient Verification of Data Authenticity	<19.3.3-r1
L CVE-2026-8723	<19.3.3-r1
L CVE-2026-13149	<19.3.3-r1
L CVE-2026-56761	<19.3.3-r1
L GHSA-79qm-7rj5-m7r9	<19.3.3-r1
L GHSA-6j4f-fj2g-mc7p	<19.3.3-r1
L External Control of File Name or Path	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-x5fp-wj9c-mxmx	<19.3.3-r1
L Insufficient Verification of Data Authenticity	<19.3.3-r1
L GHSA-w5vr-8v7q-w6rv	<19.3.3-r1
L GHSA-q3j6-qgpj-74h6	<19.3.3-r1
L GHSA-4w7w-66w2-5vf9	<19.3.3-r1
L GHSA-458j-xx4x-4375	<19.3.3-r1
L GHSA-q2hr-2g5m-vwhr	<19.3.3-r1
L GHSA-xrhx-7g5j-rcj5	<19.3.3-r1
L GHSA-5p4m-2wfm-xmqj	<19.3.3-r1
L GHSA-88fw-hqm2-52qc	<19.3.3-r1
L Cross-site Scripting (XSS)	<19.3.3-r1
L GHSA-hmw2-7cc7-3qxx	<19.3.3-r1
L GHSA-848j-6mx2-7j84	<19.3.3-r1
L GHSA-6g55-p6wh-862q	<19.3.3-r1
M Directory Traversal	<19.3.3-r1
L Reliance on Untrusted Inputs in a Security Decision	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
H Out-of-bounds Write	<19.3.3-r1
L Uncaught Exception	<19.3.3-r1
L GHSA-hm92-r4w5-c3mj	<19.3.3-r1
L Algorithmic Complexity	<19.3.3-r1
L GHSA-fxqj-rqcc-2cmp	<19.3.3-r1
L GHSA-v6wh-96g9-6wx3	<19.3.3-r1
L Exposure of Data Element to Wrong Session	<19.3.3-r1
H Uncontrolled Recursion	<19.3.3-r1
L GHSA-4mjr-xmp4-gh2g	<19.3.3-r1
M Cross-site Scripting (XSS)	<19.3.3-r1
L GHSA-r4gj-5m52-g5wh	<19.3.3-r1
L GHSA-w5hq-g745-h8pq	<19.3.3-r1
L GHSA-vxpw-j846-p89q	<19.3.3-r1
L Algorithmic Complexity	<19.3.3-r1
C Directory Traversal	<19.3.3-r1
L GHSA-jxxr-4gwj-5jf2	<19.3.3-r1
L GHSA-477h-4r7f-fvrx	<19.3.3-r1
L CVE-2026-13676	<19.3.3-r1
L Improper Certificate Validation	<19.3.3-r1
L CVE-2026-45819	<19.3.3-r1
L CVE-2026-75975	<19.3.3-r1
L Inefficient Regular Expression Complexity	<19.3.3-r1
L GHSA-g2v6-rqmx-r4w6	<19.3.3-r1
L GHSA-g6gw-c38x-mqfc	<19.3.3-r1
L Insufficient Comparison	<19.3.3-r1
L GHSA-hrr3-gc8f-f4qj	<19.3.3-r1
L GHSA-j6r3-76f7-8jcv	<19.3.3-r1
L GHSA-5j4c-8p2g-v4jx	<19.3.3-r1
L GHSA-frvp-7c67-39w9	<19.3.3-r1
L GHSA-p77w-8qqv-26rm	<19.3.3-r1
L GHSA-68fv-2mgg-jv7q	<19.3.3-r1
L GHSA-x8mw-p69m-v3mx	<19.3.3-r1
L GHSA-v2hh-gcrm-f6hx	<19.3.3-r1
L GHSA-g3ch-rx76-35fx	<19.3.3-r1
L CVE-2024-6783	<19.3.3-r1
L CVE-2026-82417	<19.3.3-r1
L CVE-2026-18149	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
M Cross-site Scripting (XSS)	<19.3.3-r1
L GHSA-542g-h47m-68v8	<19.3.3-r1
L CVE-2026-9678	<19.3.3-r1
L GHSA-3hrh-pfw6-9m5x	<19.3.3-r1
L GHSA-f65p-4m7j-42xc	<19.3.3-r1
L GHSA-vmh5-mc38-953g	<19.3.3-r1
L CVE-2026-18446	<19.3.3-r1
L CVE-2026-6321	<19.3.3-r1
L GHSA-253c-mchw-3w2r	<19.3.3-r1
L Unintended Proxy or Intermediary ('Confused Deputy')	<19.3.3-r1
L GHSA-pr7r-676h-xcf6	<19.3.3-r1
L GHSA-mwp4-54f8-5fhr	<19.3.3-r1
H Information Exposure	<19.3.3-r1
L GHSA-mh99-v99m-4gvg	<19.3.3-r1
H CVE-2026-45820	<19.3.3-r1
L CVE-2026-86472	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L CVE-2026-14257	<19.3.3-r1
L CVE-2026-6733	<19.3.3-r1
L Directory Traversal	<19.3.3-r1

Vulnerability

Vulnerable Version

<19.3.4-r0

<19.3.4-r0

<19.3.4-r0

<19.3.4-r0

<19.3.4-r0

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

Improper Validation of Array Index

<19.3.3-r4

GHSA-7jxh-36q5-gcqv

<19.3.3-r4

GHSA-8wmf-6v46-5gfg

<19.3.3-r4

Improper Authentication

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

Interpretation Conflict

<19.3.3-r4

GHSA-4hqw-qxg8-jxx2

<19.3.3-r1

GHSA-73wf-gq98-2v4g

<19.3.3-r1

GHSA-vh66-26gq-q6x8

<19.3.3-r1

HTTP Response Splitting

<19.3.3-r1

Protection Mechanism Failure

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Integer Overflow or Wraparound

<19.3.3-r1

GHSA-hvrm-45r6-mjfj

<19.3.3-r1

GHSA-238p-pmpm-9mq7

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.4-r0

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improper Validation of Specified Quantity in Input

<19.3.3-r1

CVE-2026-102422

<19.3.3-r1

GHSA-3pq3-5fj3-cg6v

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

CVE-2026-12590

<19.3.3-r1

GHSA-82fw-gwwq-j7x9

<19.3.3-r1

Improper Verification of Cryptographic Signature

<19.3.3-r1

Improper Resource Shutdown or Release

<19.3.3-r1

GHSA-j8rh-479h-cp32

<19.3.3-r1

GHSA-2gcr-mfcq-wcc3

<19.3.3-r1

Allocation of Resources Without Limits or Throttling

<19.3.3-r1

CVE-2026-15157

<19.3.3-r1

Improper Validation of Specified Quantity in Input

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Insufficient Comparison

<19.3.3-r1

Loop with Unreachable Exit Condition ('Infinite Loop')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

Overly Permissive Cross-domain Whitelist

<19.3.3-r1

GHSA-pmjh-fq2x-6v4x

<19.3.3-r1

GHSA-v39h-62p7-jpjc

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Use of Less Trusted Source

<19.3.3-r1

GHSA-f23p-vx2j-j53r

<19.3.3-r1

Uncaught Exception

<19.3.3-r1

Improper Authorization

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Loop with Unreachable Exit Condition ('Infinite Loop')

<19.3.3-r1

Information Exposure

<19.3.3-r1

Incorrect Behavior Order: Validate Before Canonicalize

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.4-r0

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Incorrect Regular Expression

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Inefficient Regular Expression Complexity

<19.3.3-r1

GHSA-rv63-4mwf-qqc2

<19.3.3-r1

HTTP Request Smuggling

<19.3.3-r1

CVE-2026-6734

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

CVE-2026-85014

<19.3.3-r1

GHSA-rfgv-xxqx-mfg5

<19.3.3-r1

GHSA-jr45-8vmc-qm54

<19.3.3-r1

Information Exposure Through Caching

<19.3.3-r1

Algorithmic Complexity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Server-Side Request Forgery (SSRF)

<19.3.3-r1

Improper Input Validation

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Use of Uninitialized Resource

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

GHSA-h67p-54hq-rp68

<19.3.3-r1

GHSA-w9m9-85wc-3x92

<19.3.3-r1

GHSA-crvj-82cr-hjcx

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Use of Less Trusted Source

<19.3.3-r1

CVE-2026-19481

<19.3.3-r1

HTTP Request Smuggling

<19.3.3-r1

GHSA-wwfh-h76j-fc44

<19.3.3-r1

Improper Encoding or Escaping of Output

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Inefficient Regular Expression Complexity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

GHSA-2v37-7h3g-55p8

<19.3.3-r1

GHSA-8xcm-r25x-g524

<19.3.3-r1

Unintended Proxy or Intermediary ('Confused Deputy')

<19.3.3-r1

GHSA-3xpg-4rpp-hhhm

<19.3.3-r1

CVE-2026-12143

<19.3.3-r1

Improper Validation of Specified Quantity in Input

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Insufficient Verification of Data Authenticity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

External Control of File Name or Path

<19.3.3-r1

Resource Exhaustion

<19.3.3-r1

GHSA-x5fp-wj9c-mxmx

<19.3.3-r1

Insufficient Verification of Data Authenticity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Reliance on Untrusted Inputs in a Security Decision

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Algorithmic Complexity

<19.3.3-r1

GHSA-fxqj-rqcc-2cmp

<19.3.3-r1

GHSA-v6wh-96g9-6wx3

<19.3.3-r1

Exposure of Data Element to Wrong Session

<19.3.3-r1

Uncontrolled Recursion

<19.3.3-r1

GHSA-4mjr-xmp4-gh2g

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

GHSA-r4gj-5m52-g5wh

<19.3.3-r1

GHSA-w5hq-g745-h8pq

<19.3.3-r1

GHSA-vxpw-j846-p89q

<19.3.3-r1

Algorithmic Complexity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improper Certificate Validation

<19.3.3-r1

CVE-2026-45819

<19.3.3-r1

CVE-2026-75975

<19.3.3-r1

Inefficient Regular Expression Complexity

<19.3.3-r1

GHSA-g2v6-rqmx-r4w6

<19.3.3-r1

GHSA-g6gw-c38x-mqfc

<19.3.3-r1

Insufficient Comparison

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Unintended Proxy or Intermediary ('Confused Deputy')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1