| Incorrect Authorization | |
| GHSA-c3rm-3hqr-4qwm | |
| GHSA-vp7f-562j-4qgr | |
| Race Condition | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-6mxv-c89j-2494 | |
| Untrusted Search Path | |
| GHSA-9h8m-3fm2-qjrq | |
| CVE-2026-56860 | |
| GHSA-xc2p-8ggw-6cr5 | |
| GHSA-25mv-j2qr-v5jq | |
| GHSA-76p8-fhrm-vpc7 | |
| CVE-2026-33818 | |
| CVE-2026-56859 | |
| CVE-2026-56862 | |
| GHSA-7qch-w8m5-g3h3 | |
| Exposure of Sensitive Information Through Metadata | |
| GHSA-2rc9-8cx9-fxpr | |
| GHSA-86r3-q889-hvg2 | |
| GHSA-8jc8-cvqj-p926 | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| GHSA-94p8-87ff-w336 | |
| Information Exposure | |
| Incorrect Authorization | |
| GHSA-6fhj-cgmm-xfx6 | |
| GHSA-45h8-qrqh-xr5v | |
| Incorrect Authorization | |
| GHSA-35pc-qwv6-4858 | |
| Cross-site Scripting (XSS) | |
| Missing Authorization | |
| Missing Authorization | |
| GHSA-g9g2-qc64-jgcj | |
| Authorization Bypass Through User-Controlled Key | |
| GHSA-r82j-g6q9-mvx8 | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-v55j-83pf-r9cq | |
| Directory Traversal | |
| GHSA-r46p-8f7g-vvvg | |
| Cross-site Scripting (XSS) | |
| GHSA-89vf-4333-qx8v | |
| Insecure Default Initialization of Resource | |
| Cross-site Scripting (XSS) | |
| Uncontrolled Memory Allocation | |
| Resource Exhaustion | |
| GHSA-73f9-jhhh-hr5m | |
| GHSA-xr9x-r78c-5hrm | |
| Improper Verification of Intent by Broadcast Receiver | |
| GHSA-p9fm-f462-ggrg | |
| Arbitrary Code Injection | |
| GHSA-9xrj-h377-fr87 | |
| Resource Exhaustion | |
| GHSA-2j26-frm8-cmj9 | |
| GHSA-cg4j-q9v8-6v38 | |
| GHSA-qcfx-2mfw-w4cg | |
| CVE-2026-42505 | |
| GHSA-ff52-ph69-cf7x | |
| GHSA-xcgv-8mv7-v8c7 | |
| CVE-2026-39822 | |
| GHSA-pjwm-pj3p-43mv | |
| Server-Side Request Forgery (SSRF) | |
| CVE-2026-50195 | |
| GHSA-cvxm-645q-p574 | |
| Improper Input Validation | |
| GHSA-33vj-92qq-66hc | |
| Symlink Following | |
| GHSA-84xv-jfrm-h4gm | |
| GHSA-rgh6-rfwx-v388 | |
| Directory Traversal | |
| Out-of-Bounds | |
| GHSA-5cv4-jp36-h3mw | |
| Improper Certificate Validation | |
| Improper Enforcement of Message Integrity During Transmission in a Communication Channel | |
| Cross-site Scripting (XSS) | |
| Incorrect Type Conversion or Cast | |
| Deserialization of Untrusted Data | |
| GHSA-rm3j-f69w-wqmq | |
| GHSA-w9p8-pvxh-rxpj | |
| GHSA-x527-x647-q7gg | |
| CVE-2026-39824 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Improper Verification of Cryptographic Signature | |
| GHSA-m9x8-m34x-fj9q | |
| GHSA-5cgq-3rg8-m6cv | |
| GHSA-q4h4-gmj2-qvw2 | |
| GHSA-78mq-xcr3-xm33 | |
| GHSA-h3gm-q7m7-mp28 | |
| CVE-2026-27145 | |
| Integer Overflow or Wraparound | |
| Improper Restriction of Rendered UI Layers or Frames | |
| CVE-2026-39821 | |
| Resource Exhaustion | |
| GHSA-cg87-vwwh-xvgj | |
| Missing Authorization | |
| CVE-2026-46598 | |
| CVE-2026-42504 | |
| CVE-2026-42507 | |
| CVE-2026-46595 | |
| GHSA-h524-452v-82p9 | |
| GHSA-89gr-r52h-f8rx | |
| GHSA-w879-237q-wc7r | |
| GHSA-4vpj-hr3r-4gpg | |
| Missing Authorization | |
| GHSA-f5wc-c3c7-36mc | |
| Improper Certificate Validation | |
| GHSA-w2q5-6q6x-x959 | |
| GHSA-jppx-rxg9-jmrx | |
| GHSA-qpw4-5x99-6vjp | |
| Improper Restriction of Rendered UI Layers or Frames | |
| GHSA-wrh2-89vg-4j9g | |
| GHSA-vgwf-h737-ff37 | |
| Improper Certificate Validation | |
| GHSA-9m57-25v3-79x9 | |
| GHSA-4279-q6mj-392r | |
| GHSA-45gg-vh54-h5m9 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| GHSA-2283-wf8c-rw8r | |
| GHSA-5m4p-2gjx-p2g8 | |
| Cross-site Scripting (XSS) | |
| CVE-2026-39825 | |
| GHSA-qc64-m6c2-v4x7 | |
| Permissive Regular Expression | |
| Partial Comparison | |
| Incorrect Behavior Order: Validate Before Canonicalize | |
| GHSA-q2ww-5357-x388 | |
| GHSA-x8cg-fq8g-mxfx | |
| GHSA-vgpv-f759-9wx3 | |
| GHSA-7mqq-6cf9-v2qp | |
| GHSA-p9h5-jm8x-mjm5 | |
| GHSA-h2jq-g4cq-5ppq | |
| Resource Exhaustion | |
| CVE-2026-42501 | |
| GHSA-3v2c-x6q9-f697 | |
| GHSA-8vqr-qjwx-82mw | |
| GHSA-h74g-238j-357m | |
| GHSA-q4qf-9j86-f5mh | |
| GHSA-qf3q-3h68-mmh2 | |
| Interpretation Conflict | |
| GHSA-v569-hp3g-36wr | |
| GHSA-xq5j-9r39-c3vf | |
| GHSA-497x-jcxf-m478 | |
| Improper Encoding or Escaping of Output | |
| Double Free | |
| NULL Pointer Dereference | |
| Out-of-bounds Write | |
| Resource Exhaustion | |
| Permissive Regular Expression | |
| CVE-2026-42499 | |
| Improper Handling of Length Parameter Inconsistency | |
| GHSA-qv7j-4883-hwh7 | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| Link Following | |
| GHSA-8g2r-hhvj-mv99 | |
| GHSA-hm49-wcqc-g2xg | |
| GHSA-75xq-5h9v-w6px | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| Arbitrary Command Injection | |
| Missing Report of Error Condition | |
| GHSA-6pjf-3r9x-m592 | |
| Arbitrary Command Injection | |
| Algorithmic Complexity | |
| GHSA-87pf-fpwv-p7m7 | |
| GHSA-q2mw-fvj9-vvcw | |
| GHSA-vcgp-9326-pqcp | |
| CVE-2026-32280 | |
| Improper Validation of Array Index | |
| GHSA-gm2x-2g9h-ccm8 | |
| GHSA-x4jj-h2v8-hqqv | |
| Integer Underflow | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-jrg3-gfjw-hm96 | |
| GHSA-5w89-2c2x-6x66 | |
| Improper Certificate Validation | |
| GHSA-jhf3-xxhw-2wpp | |
| Incorrect Authorization | |
| GHSA-m4pr-4j3g-9v7v | |
| GHSA-gjvh-7jh8-7xhm | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-whrj-4476-wvmp | |
| GHSA-mxw3-3hh2-x2mh | |
| Directory Traversal | |
| Cross-site Scripting (XSS) | |
| Improper Authorization | |
| GHSA-p77j-4mvh-x3m3 | |
| CVE-2026-1229 | |
| GHSA-q9hv-hpm4-hj6x | |
| GHSA-rv83-g57w-fr8j | |
| Direct Request ('Forced Browsing') | |
| GHSA-j3gx-2473-5fp8 | |
| Directory Traversal | |
| GHSA-hm5p-x4rq-38w4 | |
| Server-Side Request Forgery (SSRF) | |
| CVE-2025-47914 | |
| GHSA-f6x5-jh6r-wrfv | |
| GHSA-w4gw-w5jq-g9jh | |
| GHSA-37cx-329c-33x3 | |
| GHSA-56w8-48fp-6mgv | |
| CVE-2025-47911 | |
| Improper Validation of Integrity Check Value | |
| Reachable Assertion | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| GHSA-j5w8-q4qc-rx2x | |
| CVE-2025-58181 | |
| GHSA-3966-f6p6-2qr9 | |
| Incorrect Permission Assignment for Critical Resource | |
