| Cross-site Scripting (XSS) | |
| CVE-2026-27143 | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| CVE-2026-32280 | |
| Cross-site Scripting (XSS) | |
| GHSA-cqrx-3m42-5p5w | |
| GHSA-m4pr-4j3g-9v7v | |
| GHSA-j4j7-vw47-rhfq | |
| GHSA-gjvh-7jh8-7xhm | |
| Improper Certificate Validation | |
| GHSA-5w89-2c2x-6x66 | |
| Incorrect Authorization | |
| Direct Request ('Forced Browsing') | |
| GHSA-rv83-g57w-fr8j | |
| Directory Traversal | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-7mr4-xjxg-34g6 | |
| GHSA-j3gx-2473-5fp8 | |
| GHSA-cfp9-33rc-j74f | |
| GHSA-x4jj-h2v8-hqqv | |
| GHSA-jrg3-gfjw-hm96 | |
| Allocation of Resources Without Limits or Throttling | |
| Link Following | |
| GHSA-xj38-jxc5-rppx | |
| GHSA-h355-32pf-p2xm | |
| GHSA-8jvr-vh7g-f8gx | |
| CVE-2025-68121 | |
| CVE-2025-61732 | |
| Missing Initialization of Resource | |
| GHSA-4vq8-7jfc-9cvp | |
| GHSA-g754-hx8w-x2g6 | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-7c64-f9jr-v9h2 | |
| Improper Certificate Validation | |
| CVE-2025-47914 | |
| CVE-2025-58181 | |
| GHSA-f6x5-jh6r-wrfv | |
| GHSA-j5w8-q4qc-rx2x | |
| GHSA-47m2-4cr7-mhcw | |
| Reachable Assertion | |
| Cleartext Transmission of Sensitive Information | |
| GHSA-q82r-2j7m-9rv4 | |