| Inefficient Regular Expression Complexity | |
| Inefficient Regular Expression Complexity | |
| Inefficient Regular Expression Complexity | |
| Algorithmic Complexity | |
| Improper Check for Unusual or Exceptional Conditions | |
| Resource Exhaustion | |
| CRLF Injection | |
| Resource Exhaustion | |
| Allocation of Resources Without Limits or Throttling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| CRLF Injection | |
| Information Exposure Through Caching | |
| Resource Exhaustion | |
| Improper Access Control | |
| Resource Exhaustion | |
| Improper Encoding or Escaping of Output | |
| HTTP Request Smuggling | |
| CVE-2026-40984 | |
| CVE-2026-40983 | |
| Information Exposure | |
| Use of Non-Canonical URL Paths for Authorization Decisions | |
| Improper Handling of Alternate Encoding | |
| Improper Input Validation | |
| Incorrect Authorization | |
| HTTP Request Smuggling | |
| Improper Verification of Cryptographic Signature | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Access Control | |
| Memory Leak | |
| Information Exposure | |
| Improper Check or Handling of Exceptional Conditions | |
| Uncontrolled Recursion | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Integer Overflow or Wraparound | |
| HTTP Request Smuggling | |
| Missing Release of Resource after Effective Lifetime | |
| HTTP Response Splitting | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| HTTP Request Smuggling | |
| CRLF Injection | |
| CVE-2026-39304 | |
| Improper Encoding or Escaping of Output | |
| Improper Validation of Certificate with Host Mismatch | |
| HTTP Request Smuggling | |
| Improper Output Neutralization for Logs | |
| Directory Traversal | |