commercial-gitlab-rails-ee-fips-19.3

Direct Vulnerabilities

Known vulnerabilities in the commercial-gitlab-rails-ee-fips-19.3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-mvxr-6m87-mv2q	<19.3.3-r4
L GHSA-7jxh-36q5-gcqv	<19.3.3-r4
L Resource Exhaustion	<19.3.3-r4
L Resource Exhaustion	<19.3.3-r4
L Information Exposure	<19.3.3-r4
L Improper Validation of Array Index	<19.3.3-r4
L CVE-2025-67202	<19.3.3-r4
L GHSA-8wmf-6v46-5gfg	<19.3.3-r4
L GHSA-xv9c-mjw8-79gf	<19.3.3-r4
L GHSA-m6vc-f87m-cc2h	<19.3.3-r4
L Improper Authentication	<19.3.3-r4
L GHSA-2v4p-qf9q-27wj	<19.3.3-r4
L GHSA-pg57-6jwg-q645	<19.3.3-r4
L Interpretation Conflict	<19.3.3-r4
L CVE-2026-56866	<19.3.3-r3
L GHSA-874m-fcc5-9gqf	<19.3.3-r3
L GHSA-wpfx-qch4-q5j2	<19.3.3-r3
L GHSA-2gfw-j3c5-j46w	<19.3.3-r3
L GHSA-f4xw-m386-m277	<19.3.3-r3
L CVE-2026-94448	<19.3.3-r3
L CVE-2026-78667	<19.3.3-r3
L CVE-2026-94439	<19.3.3-r3
L CVE-2026-97031	<19.3.3-r3
L GHSA-f5vf-8pvc-394g	<19.3.3-r3
L CVE-2026-56857	<19.3.3-r3
L CVE-2026-94440	<19.3.3-r3
L CVE-2026-97030	<19.3.3-r3
L GHSA-c3q7-m35p-9qq7	<19.3.3-r3
L GHSA-22jx-p735-qcpm	<19.3.3-r3
L GHSA-hq7w-2xrq-wp2j	<19.3.3-r3
L Improper Validation of Specified Quantity in Input	<19.3.3-r1
L GHSA-v422-hmwv-36x6	<19.3.3-r1
L GHSA-c83g-rgw3-j3cx	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L GHSA-35p6-xmwp-9g52	<19.3.3-r1
L Information Exposure	<19.3.3-r1
L Insufficient Verification of Data Authenticity	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L GHSA-3xpg-4rpp-hhhm	<19.3.3-r1
L GHSA-jqff-g426-hqxp	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-hrr3-gc8f-f4qj	<19.3.3-r1
L GHSA-gqvv-2mrq-wpjv	<19.3.3-r1
L GHSA-238p-pmpm-9mq7	<19.3.3-r1
L GHSA-g3ch-rx76-35fx	<19.3.3-r1
L GHSA-52cp-r559-cp3m	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-xwg4-73v4-xw9w	<19.3.3-r1
H CVE-2026-6734	<19.3.3-r1
L Cross-site Scripting (XSS)	<19.3.3-r1
L Algorithmic Complexity	<19.3.3-r1
L GHSA-f65p-4m7j-42xc	<19.3.3-r1
L Arbitrary Code Injection	<19.3.3-r1
L GHSA-r28c-9q8g-f849	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
M Directory Traversal	<19.3.3-r1
L Cross-site Scripting (XSS)	<19.3.3-r1
L Inefficient Regular Expression Complexity	<19.3.3-r1
L GHSA-4w7w-66w2-5vf9	<19.3.3-r1
L External Control of File Name or Path	<19.3.3-r1
L CVE-2026-84890	<19.3.3-r1
L GHSA-gxm5-99cw-xjw9	<19.3.3-r1
L GHSA-rfgv-xxqx-mfg5	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L GHSA-m8m8-qj5v-23w3	<19.3.3-r1
L GHSA-pr7r-676h-xcf6	<19.3.3-r1
L GHSA-2wm5-q62r-hmrv	<19.3.3-r1
L GHSA-2gqq-gqf2-x968	<19.3.3-r1
L GHSA-9vqf-7f2p-gf9v	<19.3.3-r1
L CVE-2026-19484	<19.3.3-r1
L CVE-2026-6321	<19.3.3-r1
L CVE-2026-102422	<19.3.3-r1
L GHSA-mghh-pgcx-3jjj	<19.3.3-r1
L GHSA-p88m-4jfj-68fv	<19.3.3-r1
L CVE-2026-13676	<19.3.3-r1
C Directory Traversal	<19.3.3-r1
L GHSA-4mjr-xmp4-gh2g	<19.3.3-r1
L GHSA-jxxr-4gwj-5jf2	<19.3.3-r1
H CVE-2026-14643	<19.3.3-r1
L Allocation of Resources Without Limits or Throttling	<19.3.3-r1
M Cross-site Scripting (XSS)	<19.3.3-r1
L GHSA-6fw5-9hq8-w87g	<19.3.3-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<19.3.3-r1
L GHSA-v3r7-h72x-cjcm	<19.3.3-r1
L Arbitrary Code Injection	<19.3.3-r1
L CVE-2026-84394	<19.3.3-r1
L CVE-2026-13149	<19.3.3-r1
L GHSA-c29m-xwm3-cm6r	<19.3.3-r1
L GHSA-4x5r-pxfx-6jf8	<19.3.3-r1
L CVE-2026-74866	<19.3.3-r1
L Integer Overflow or Wraparound	<19.3.3-r1
L Exposure of Data Element to Wrong Session	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L Inefficient Regular Expression Complexity	<19.3.3-r1
L GHSA-v2hh-gcrm-f6hx	<19.3.3-r1
L Use of Less Trusted Source	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L GHSA-jqcg-44mw-7w3h	<19.3.3-r1
L GHSA-h3mg-xc3c-68pw	<19.3.3-r1
L Insufficient Comparison	<19.3.3-r1
L Algorithmic Complexity	<19.3.3-r1
M CVE-2026-16728	<19.3.3-r1
L GHSA-88fw-hqm2-52qc	<19.3.3-r1
M Directory Traversal	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
M Cross-site Scripting (XSS)	<19.3.3-r1
L CVE-2026-45249	<19.3.4-r0
L GHSA-qjx8-664m-686j	<19.3.3-r1
L Cross-site Scripting (XSS)	<19.3.3-r1
L GHSA-hm92-r4w5-c3mj	<19.3.3-r1
L GHSA-848j-6mx2-7j84	<19.3.3-r1
L GHSA-4c8g-83qw-93j6	<19.3.3-r1
L GHSA-mh99-v99m-4gvg	<19.3.3-r1
L GHSA-2v37-7h3g-55p8	<19.3.3-r1
L CVE-2026-12151	<19.3.3-r1
L GHSA-7p8r-x3mc-p8w7	<19.3.3-r1
M Improper Authorization	<19.3.3-r1
L CVE-2026-45822	<19.3.3-r1
L GHSA-2jfj-6hjv-fm6j	<19.3.3-r1
L GHSA-r53p-7pc4-xj5r	<19.3.3-r1
L GHSA-vmh5-mc38-953g	<19.3.3-r1
L GHSA-f23p-vx2j-j53r	<19.3.3-r1
L CVE-2026-12143	<19.3.3-r1
L GHSA-qx2v-qp2m-jg93	<19.3.3-r1
L GHSA-qhr7-859c-m2p7	<19.3.3-r1
L GHSA-58qx-3vcg-4xpx	<19.3.3-r1
L GHSA-28wg-ghj8-5hjv	<19.3.3-r1
L CVE-2026-18540	<19.3.3-r1
L GHSA-68fv-2mgg-jv7q	<19.3.3-r1
L CVE-2026-6322	<19.3.3-r1
L GHSA-vxpw-j846-p89q	<19.3.3-r1
L GHSA-82fw-gwwq-j7x9	<19.3.3-r1
L CVE-2026-11525	<19.3.3-r1
L GHSA-pxg6-pf52-xh8x	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-5j4c-8p2g-v4jx	<19.3.3-r1
L GHSA-q3j6-qgpj-74h6	<19.3.3-r1
L HTTP Request Smuggling	<19.3.3-r1
L GHSA-crvj-82cr-hjcx	<19.3.3-r1
L GHSA-2883-xcg3-v3hh	<19.3.3-r1
L GHSA-px8p-9vwx-vf98	<19.3.3-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<19.3.3-r1
L CVE-2024-9506	<19.3.3-r1
L CVE-2026-102414	<19.3.3-r1
L GHSA-8j4g-w8fx-2239	<19.3.3-r1
H CVE-2026-85014	<19.3.3-r1
L GHSA-x5fp-wj9c-mxmx	<19.3.3-r1
L CVE-2026-18149	<19.3.3-r1
L GHSA-g8m3-5g58-fq7m	<19.3.3-r1
L GHSA-rv63-4mwf-qqc2	<19.3.3-r1
L GHSA-qp7p-654g-cw7p	<19.3.3-r1
L CVE-2026-82417	<19.3.3-r1
L Race Condition	<19.3.3-r1
L Server-Side Request Forgery (SSRF)	<19.3.3-r1
L GHSA-rgw5-rvv9-x895	<19.3.3-r1
L GHSA-6g55-p6wh-862q	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-q8mj-m7cp-5q26	<19.3.3-r1
L GHSA-v2wj-q39q-566r	<19.3.3-r1
L GHSA-fxqj-rqcc-2cmp	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-8xcm-r25x-g524	<19.3.3-r1
L CVE-2026-16221	<19.3.3-r1
L GHSA-x8mw-p69m-v3mx	<19.3.3-r1
L CVE-2026-75975	<19.3.3-r1
L Uncaught Exception	<19.3.3-r1
L CVE-2026-8723	<19.3.3-r1
L CVE-2026-14257	<19.3.3-r1
L CVE-2026-6733	<19.3.3-r1
L GHSA-96hv-2xvq-fx4p	<19.3.3-r1
L GHSA-j8rh-479h-cp32	<19.3.3-r1
M CVE-2026-15157	<19.3.3-r1
L Inefficient Regular Expression Complexity	<19.3.3-r1
L CVE-2026-90711	<19.3.3-r1
L Directory Traversal	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-477h-4r7f-fvrx	<19.3.3-r1
L GHSA-4cwx-7wf7-3272	<19.3.3-r1
L GHSA-g6gw-c38x-mqfc	<19.3.3-r1
L GHSA-xjh9-v7x6-24jw	<19.3.3-r1
L GHSA-j6r3-76f7-8jcv	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-458j-xx4x-4375	<19.3.3-r1
L CVE-2026-9678	<19.3.3-r1
L GHSA-79qm-7rj5-m7r9	<19.3.3-r1
L CVE-2026-82562	<19.3.3-r1
L GHSA-jr45-8vmc-qm54	<19.3.3-r1
H Use of Uninitialized Resource	<19.3.3-r1
L GHSA-wgpf-jwqj-8h8p	<19.3.3-r1
L GHSA-v39h-62p7-jpjc	<19.3.3-r1
L GHSA-hxh3-vqpv-xpqv	<19.3.3-r1
L CVE-2026-76172	<19.3.3-r1
L GHSA-pmjh-fq2x-6v4x	<19.3.3-r1
H CVE-2026-45820	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L CVE-2024-47764	<19.3.3-r1
L GHSA-q2hr-2g5m-vwhr	<19.3.3-r1
L GHSA-hm8q-7f3q-5f36	<19.3.3-r1
L GHSA-mwp4-54f8-5fhr	<19.3.3-r1
L GHSA-6623-4q32-82v8	<19.3.3-r1
H Uncontrolled Recursion	<19.3.3-r1
L GHSA-4hqw-qxg8-jxx2	<19.3.3-r1
L CVE-2026-86472	<19.3.3-r1
L GHSA-rj75-hqrm-r3gf	<19.3.3-r1
L Unintended Proxy or Intermediary ('Confused Deputy')	<19.3.3-r1
L GHSA-w5hq-g745-h8pq	<19.3.3-r1
L GHSA-fx2h-pf6j-xcff	<19.3.3-r1
L GHSA-3pq3-5fj3-cg6v	<19.3.3-r1
L GHSA-fgmj-fm8m-jvvx	<19.3.4-r0
L Uncaught Exception	<19.3.3-r1
L Insufficient Comparison	<19.3.3-r1
L CVE-2026-84292	<19.3.3-r1
L GHSA-rpw4-54j3-4h4q	<19.3.3-r1
L GHSA-73wf-gq98-2v4g	<19.3.3-r1
L GHSA-f577-qrjj-4474	<19.3.3-r1
L Protection Mechanism Failure	<19.3.3-r1
L GHSA-2gc4-cqfq-p2gv	<19.3.3-r1
L CVE-2026-19534	<19.3.3-r1
L GHSA-vh66-26gq-q6x8	<19.3.3-r1
M HTTP Response Splitting	<19.3.3-r1
L GHSA-3jxr-9vmj-r5cp	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
L Arbitrary Code Injection	<19.3.3-r1
L GHSA-vcc3-ghjq-m6fr	<19.3.3-r1
H Incorrect Behavior Order: Validate Before Canonicalize	<19.3.3-r1
L GHSA-xgm2-5f3f-mvvc	<19.3.3-r1
H CVE-2026-84933	<19.3.3-r1
L GHSA-58mr-gqgx-xq4g	<19.3.3-r1
L GHSA-c8x8-7fp4-3x9w	<19.3.3-r1
L GHSA-rx4f-c7p8-82vq	<19.3.3-r1
L CVE-2024-6783	<19.3.3-r1
M CVE-2026-84947	<19.3.3-r1
M Arbitrary Code Injection	<19.3.3-r1
L CVE-2026-19481	<19.3.3-r1
L CVE-2026-12590	<19.3.3-r1
L GHSA-p77w-8qqv-26rm	<19.3.3-r1
L GHSA-2gcr-mfcq-wcc3	<19.3.3-r1
L Incorrect Regular Expression	<19.3.3-r1
L GHSA-6j4f-fj2g-mc7p	<19.3.3-r1
L GHSA-9fr6-4gfg-395g	<19.3.3-r1
L GHSA-w9m9-85wc-3x92	<19.3.3-r1
L GHSA-69xw-7hcm-h432	<19.3.3-r1
H Improper Validation of Specified Quantity in Input	<19.3.3-r1
H Improper Verification of Cryptographic Signature	<19.3.3-r1
L GHSA-54fx-42gc-7vw4	<19.3.3-r1
L Algorithmic Complexity	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<19.3.3-r1
M Improper Resource Shutdown or Release	<19.3.3-r1
L CVE-2026-56761	<19.3.3-r1
L GHSA-w293-vg96-wgc3	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-h67p-54hq-rp68	<19.3.3-r1
L Improper Certificate Validation	<19.3.3-r1
L Information Exposure Through Caching	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
M Improper Validation of Specified Quantity in Input	<19.3.3-r1
L GHSA-5p4m-2wfm-xmqj	<19.3.3-r1
L GHSA-m8rv-5g2x-5cg5	<19.3.3-r1
L GHSA-hmw2-7cc7-3qxx	<19.3.3-r1
L GHSA-frvp-7c67-39w9	<19.3.3-r1
L GHSA-xrhx-7g5j-rcj5	<19.3.3-r1
L GHSA-6688-9rhm-gjv2	<19.3.3-r1
L GHSA-3hrh-pfw6-9m5x	<19.3.3-r1
C CVE-2026-84961	<19.3.3-r1
L GHSA-253c-mchw-3w2r	<19.3.3-r1
L HTTP Request Smuggling	<19.3.3-r1
L GHSA-wwfh-h76j-fc44	<19.3.3-r1
L GHSA-vfj7-8cjw-p6xm	<19.3.3-r1
H Out-of-bounds Write	<19.3.3-r1
L Improper Input Validation	<19.3.3-r1
L GHSA-44g4-m2mj-wpvx	<19.3.3-r1
H Resource Exhaustion	<19.3.3-r1
L GHSA-r4gj-5m52-g5wh	<19.3.3-r1
L GHSA-j6c9-x7qj-28xf	<19.3.3-r1
L GHSA-v6wh-96g9-6wx3	<19.3.3-r1
L GHSA-hvrm-45r6-mjfj	<19.3.3-r1
L GHSA-p9ff-h696-f583	<19.3.3-r1
L CVE-2026-18446	<19.3.3-r1
L Insufficient Verification of Data Authenticity	<19.3.3-r1
H Information Exposure	<19.3.3-r1
L GHSA-7mx3-vvmw-hjmv	<19.3.3-r1
L GHSA-6qxp-vccf-f47h	<19.3.3-r1
M CVE-2026-85008	<19.3.3-r1
L Improper Encoding or Escaping of Output	<19.3.3-r1
L GHSA-cp6q-959q-f8rh	<19.3.3-r1
L Resource Exhaustion	<19.3.3-r1
L GHSA-w5vr-8v7q-w6rv	<19.3.3-r1
L GHSA-v2v4-37r5-5v8g	<19.3.3-r1
L GHSA-qw65-cvwx-89v3	<19.3.3-r1
L GHSA-542g-h47m-68v8	<19.3.3-r1
L GHSA-p98j-92pf-mc4p	<19.3.3-r1
L Unintended Proxy or Intermediary ('Confused Deputy')	<19.3.3-r1
L GHSA-8436-99hf-9mmv	<19.3.3-r1
L GHSA-hp3w-g68c-fv3c	<19.3.3-r1
L GHSA-x97p-jq2g-jp4f	<19.3.3-r1
L CVE-2026-9697	<19.3.3-r1
L Reliance on Untrusted Inputs in a Security Decision	<19.3.3-r1
C CVE-2026-13697	<19.3.3-r1
L Overly Permissive Cross-domain Whitelist	<19.3.3-r1
M CVE-2026-16729	<19.3.3-r1
L CVE-2025-14505	<19.3.3-r1
L GHSA-pqg4-j6r4-53mv	<19.3.3-r1
L GHSA-g2v6-rqmx-r4w6	<19.3.3-r1
L CVE-2026-9679	<19.3.3-r1
L GHSA-86w9-cpqp-85rv	<19.3.3-r1
L GHSA-w62v-xxxg-mg59	<19.3.3-r1
L CVE-2026-45819	<19.3.3-r1
L Use of Less Trusted Source	<19.3.3-r1

Vulnerability

Vulnerable Version

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

Improper Validation of Array Index

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

<19.3.3-r4

Improper Authentication

<19.3.3-r4

GHSA-2v4p-qf9q-27wj

<19.3.3-r4

GHSA-pg57-6jwg-q645

<19.3.3-r4

Interpretation Conflict

<19.3.3-r4

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

<19.3.3-r3

Improper Validation of Specified Quantity in Input

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Insufficient Verification of Data Authenticity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

Algorithmic Complexity

<19.3.3-r1

GHSA-f65p-4m7j-42xc

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

GHSA-r28c-9q8g-f849

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

Directory Traversal

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

Inefficient Regular Expression Complexity

<19.3.3-r1

GHSA-4w7w-66w2-5vf9

<19.3.3-r1

External Control of File Name or Path

<19.3.3-r1

CVE-2026-84890

<19.3.3-r1

GHSA-gxm5-99cw-xjw9

<19.3.3-r1

GHSA-rfgv-xxqx-mfg5

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Allocation of Resources Without Limits or Throttling

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

GHSA-6fw5-9hq8-w87g

<19.3.3-r1

Loop with Unreachable Exit Condition ('Infinite Loop')

<19.3.3-r1

GHSA-v3r7-h72x-cjcm

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Integer Overflow or Wraparound

<19.3.3-r1

Exposure of Data Element to Wrong Session

<19.3.3-r1

Resource Exhaustion

<19.3.3-r1

Inefficient Regular Expression Complexity

<19.3.3-r1

GHSA-v2hh-gcrm-f6hx

<19.3.3-r1

Use of Less Trusted Source

<19.3.3-r1

Directory Traversal

<19.3.3-r1

GHSA-jqcg-44mw-7w3h

<19.3.3-r1

GHSA-h3mg-xc3c-68pw

<19.3.3-r1

Insufficient Comparison

<19.3.3-r1

Algorithmic Complexity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

CVE-2026-45249

<19.3.4-r0

GHSA-qjx8-664m-686j

<19.3.3-r1

Cross-site Scripting (XSS)

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improper Authorization

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

HTTP Request Smuggling

<19.3.3-r1

GHSA-crvj-82cr-hjcx

<19.3.3-r1

GHSA-2883-xcg3-v3hh

<19.3.3-r1

GHSA-px8p-9vwx-vf98

<19.3.3-r1

Loop with Unreachable Exit Condition ('Infinite Loop')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Server-Side Request Forgery (SSRF)

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Inefficient Regular Expression Complexity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Use of Uninitialized Resource

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Uncontrolled Recursion

<19.3.3-r1

GHSA-4hqw-qxg8-jxx2

<19.3.3-r1

CVE-2026-86472

<19.3.3-r1

GHSA-rj75-hqrm-r3gf

<19.3.3-r1

Unintended Proxy or Intermediary ('Confused Deputy')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.4-r0

<19.3.3-r1

Insufficient Comparison

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Protection Mechanism Failure

<19.3.3-r1

GHSA-2gc4-cqfq-p2gv

<19.3.3-r1

CVE-2026-19534

<19.3.3-r1

GHSA-vh66-26gq-q6x8

<19.3.3-r1

HTTP Response Splitting

<19.3.3-r1

GHSA-3jxr-9vmj-r5cp

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

GHSA-vcc3-ghjq-m6fr

<19.3.3-r1

Incorrect Behavior Order: Validate Before Canonicalize

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Arbitrary Code Injection

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Incorrect Regular Expression

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improper Validation of Specified Quantity in Input

<19.3.3-r1

Improper Verification of Cryptographic Signature

<19.3.3-r1

GHSA-54fx-42gc-7vw4

<19.3.3-r1

Algorithmic Complexity

<19.3.3-r1

Resource Exhaustion

<19.3.3-r1

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<19.3.3-r1

Improper Resource Shutdown or Release

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improper Certificate Validation

<19.3.3-r1

Information Exposure Through Caching

<19.3.3-r1

Resource Exhaustion

<19.3.3-r1

Improper Validation of Specified Quantity in Input

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

HTTP Request Smuggling

<19.3.3-r1

GHSA-wwfh-h76j-fc44

<19.3.3-r1

GHSA-vfj7-8cjw-p6xm

<19.3.3-r1

Out-of-bounds Write

<19.3.3-r1

Improper Input Validation

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Insufficient Verification of Data Authenticity

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Improper Encoding or Escaping of Output

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Unintended Proxy or Intermediary ('Confused Deputy')

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Reliance on Untrusted Inputs in a Security Decision

<19.3.3-r1

CVE-2026-13697

<19.3.3-r1

Overly Permissive Cross-domain Whitelist

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

<19.3.3-r1

Use of Less Trusted Source

<19.3.3-r1