| Incorrect Authorization | |
| Incorrect Authorization | |
| Cross-site Scripting (XSS) | |
| Heap-based Buffer Overflow | |
| Integer Overflow or Wraparound | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Integer Overflow or Wraparound | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| HTTP Response Splitting | |
| Insufficient Verification of Data Authenticity | |
| Improper Input Validation | |
| HTTP Response Splitting | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| HTTP Response Splitting | |
| Resource Exhaustion | |
| Directory Traversal | |
| CVE-2025-14546 | |
| Out-of-Bounds | |
| Inefficient Regular Expression Complexity | |
| Improper Neutralization of Special Elements Used in a Template Engine | |
| Directory Traversal | |
| SQL Injection | |
| Arbitrary Command Injection | |
| Link Following | |
| Directory Traversal | |
| Excessive Iteration | |
| CVE-2025-67221 | |
| Uncontrolled Memory Allocation | |
| Directory Traversal | |
| Resource Exhaustion | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Directory Traversal | |
| Inefficient Regular Expression Complexity | |
| Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | |
| Inefficient Regular Expression Complexity | |
| Inefficient Regular Expression Complexity | |
| Resource Exhaustion | |
| Excessive Iteration | |
| Uncontrolled Memory Allocation | |
| Algorithmic Complexity | |
| Improper Certificate Validation | |