| Cross-site Scripting (XSS) | |
| GHSA-p77j-4mvh-x3m3 | |
| Uncaught Exception | |
| Improper Authorization | |
| GHSA-78h2-9frx-2jm8 | |
| GHSA-cg87-vwwh-xvgj | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Uncontrolled Memory Allocation | |
| GHSA-m9x8-m34x-fj9q | |
| GHSA-w8rr-5gcm-pp58 | |
| GHSA-9h8m-3fm2-qjrq | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Uncontrolled Memory Allocation | |
| GHSA-5cv4-jp36-h3mw | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-hfvc-g4fc-pqhx | |
| GHSA-wrh2-89vg-4j9g | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Untrusted Search Path | |
| GHSA-mh2q-q3fh-2475 | |
| Resource Exhaustion | |
| GHSA-5wrp-cwcj-q835 | |
| GHSA-w9p8-pvxh-rxpj | |
| Untrusted Search Path | |
| Resource Exhaustion | |
| CVE-2026-56862 | |
| GHSA-xc2p-8ggw-6cr5 | |
| GHSA-7qch-w8m5-g3h3 | |
| CVE-2026-33818 | |
| GHSA-5239-wwwm-4pmq | |
| GHSA-gcjh-h69q-9w9g | |
| Resource Exhaustion | |
| GHSA-ff52-ph69-cf7x | |
| Resource Exhaustion | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| GHSA-8ppf-4f7h-5ppj | |
| CVE-2026-59890 | |
| GHSA-xcgv-8mv7-v8c7 | |
| CVE-2026-39822 | |
| GHSA-hm4w-wwcw-mr6r | |
| Uncontrolled Recursion | |
| CVE-2026-42505 | |
| Information Exposure | |
| GHSA-qccp-gfcp-xxvc | |
| GHSA-mf9v-mfxr-j63j | |
| GHSA-h35f-9h28-mq5c | |
| GHSA-jr27-m4p2-rc6r | |
| GHSA-cvxm-645q-p574 | |
| Improper Input Validation | |
| GHSA-33vj-92qq-66hc | |
| GHSA-rgh6-rfwx-v388 | |
| CVE-2026-50195 | |
| Symlink Following | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Insecure Temporary File | |
| GHSA-65pc-fj4g-8rjx | |
| GHSA-gc5v-m9x4-r6x2 | |
| Inefficient Regular Expression Complexity | |
| GHSA-h524-452v-82p9 | |
| CVE-2026-42504 | |
| GHSA-h3gm-q7m7-mp28 | |
| GHSA-4279-q6mj-392r | |
| CVE-2026-27145 | |
| CVE-2026-42507 | |
| GHSA-2283-wf8c-rw8r | |
| GHSA-5m4p-2gjx-p2g8 | |
| GHSA-497x-jcxf-m478 | |
| GHSA-qf3q-3h68-mmh2 | |
| Link Following | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2026-42499 | |
| CVE-2026-39825 | |
| Cross-site Scripting (XSS) | |
| GHSA-qc64-m6c2-v4x7 | |
| Out-of-bounds Write | |
| GHSA-8g2r-hhvj-mv99 | |
| GHSA-3v2c-x6q9-f697 | |
| GHSA-xq5j-9r39-c3vf | |
| CVE-2026-42501 | |
| NULL Pointer Dereference | |
| GHSA-h74g-238j-357m | |
| GHSA-p9h5-jm8x-mjm5 | |
| Improper Encoding or Escaping of Output | |
| Double Free | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| GHSA-r374-rxx8-8654 | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| GHSA-jp4c-xjxw-mgf9 | |
| GHSA-2xpw-w6gg-jr37 | |
| Open Redirect | |
| GHSA-58qw-9mgm-455v | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-38jv-5279-wg99 | |
| GHSA-pq67-6m6q-mj2v | |
| CVE-2026-3219 | |
| CVE-2026-6357 | |
| GHSA-gm62-xv2j-4w53 | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| GHSA-gjvh-7jh8-7xhm | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-m4pr-4j3g-9v7v | |
| GHSA-x4jj-h2v8-hqqv | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Link Following | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2026-27143 | |
| Improper Certificate Validation | |
| GHSA-jrg3-gfjw-hm96 | |
| GHSA-m959-cc7f-wv43 | |
| Out-of-Bounds | |
| CVE-2026-32280 | |
| GHSA-p423-j2cm-9vmq | |
| Improper Certificate Validation | |
| GHSA-5w89-2c2x-6x66 | |
| GHSA-xj38-jxc5-rppx | |
| Cross-site Scripting (XSS) | |
| Incorrect Authorization | |
| GHSA-cqrx-3m42-5p5w | |
| GHSA-cfp9-33rc-j74f | |
| GHSA-7mr4-xjxg-34g6 | |
| CVE-2026-33817 | |
| GHSA-6jwv-w5xf-7j27 | |
| Cross-site Scripting (XSS) | |
| Directory Traversal | |
| GHSA-j4j7-vw47-rhfq | |
| GHSA-rv83-g57w-fr8j | |
| GHSA-j3gx-2473-5fp8 | |
| Direct Request ('Forced Browsing') | |
| CVE-2025-67221 | |
| GHSA-hx9q-6w63-j58v | |
| Directory Traversal | |
| CVE-2026-0994 | |
| GHSA-7gcm-g887-7qv7 | |
| GHSA-8rrh-rw8j-w5fx | |
| CVE-2026-26007 | |
| GHSA-r6ph-v2qm-q3c2 | |