| Permissive Regular Expression | |
| Interpretation Conflict | |
| Resource Exhaustion | |
| Interpretation Conflict | |
| CRLF Injection | |
| Permissive Regular Expression | |
| Partial Comparison | |
| Incorrect Behavior Order: Validate Before Canonicalize | |
| Improper Authentication | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Improper Validation of Syntactic Correctness of Input | |
| Resource Exhaustion | |
| Improper Handling of Length Parameter Inconsistency | |
| Improper Encoding or Escaping of Output | |
| Improper Output Neutralization for Logs | |
| Improper Validation of Certificate with Host Mismatch | |
| Improper Encoding or Escaping of Output | |
| Information Exposure Through Server Log Files | |
| Race Condition | |
| HTTP Request Smuggling | |
| Uncontrolled Recursion | |
| Cross-site Scripting (XSS) | |
| Directory Traversal | |
| Server-Side Request Forgery (SSRF) | |
| Arbitrary Code Injection | |