| Improper Restriction of Communication Channel to Intended Endpoints | |
| Sensitive Information Uncleared Before Release | |
| Incorrect Authorization | |
| Improper Protection of Alternate Path | |
| Missing Authorization | |
| Inclusion of Functionality from Untrusted Control Sphere | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Incorrect Resource Transfer Between Spheres | |
| Directory Traversal | |
| Incorrect Resource Transfer Between Spheres | |
| Incorrect Behavior Order | |
| Improper Neutralization of Special Elements Used in a Template Engine | |
| Incorrect Resource Transfer Between Spheres | |
| Inclusion of Functionality from Untrusted Control Sphere | |
| CVE-2025-44021 | |
| CVE-2024-47211 | |
| CVE-2024-44082 | |
| Information Exposure | |
| Information Exposure | |