| Improper Access Control | |
| Inappropriate Encoding for Output Context | |
| Cleartext Transmission of Sensitive Information | |
| Insufficiently Protected Credentials | |
| Allocation of Resources Without Limits or Throttling | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| Missing Release of Resource after Effective Lifetime | |
| Use of Insufficiently Random Values | |
| HTTP Request Smuggling | |
| Not Failing Securely ('Failing Open') | |
| CRLF Injection | |
| Allocation of Resources Without Limits or Throttling | |
| HTTP Response Splitting | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Resource Exhaustion | |
| CVE-2026-54428 | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| CRLF Injection | |
| Integer Overflow or Wraparound | |
| CVE-2026-54399 | |
| GHSA-r7wm-3cxj-wff9 | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| GHSA-mhm7-754m-9p8w | |
| CVE-2026-10532 | |
| HTTP Request Smuggling | |
| CVE-2026-9828 | |
| HTTP Request Smuggling | |
| Incomplete Blacklist | |
| GHSA-72hv-8253-57qq | |
| CVE-2024-12801 | |
| CVE-2024-12798 | |
| CVE-2025-11226 | |
| CVE-2026-1225 | |
| Information Exposure | |
| Server-Side Request Forgery (SSRF) | |
| Incomplete Blacklist | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Access Control | |
| Improper Verification of Cryptographic Signature | |
| Resource Exhaustion | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Input Validation | |
| Insufficient Verification of Data Authenticity | |
| Insufficient Verification of Data Authenticity | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |