| Missing Release of Resource after Effective Lifetime | |
| HTTP Request Smuggling | |
| Information Exposure | |
| Resource Exhaustion | |
| Improper Verification of Cryptographic Signature | |
| CVE-2026-54428 | |
| Resource Exhaustion | |
| HTTP Request Smuggling | |
| Use of Insufficiently Random Values | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure Through Caching | |
| CVE-2026-54399 | |
| Resource Exhaustion | |
| Improper Access Control | |
| Resource Exhaustion | |
| Improper Check for Unusual or Exceptional Conditions | |
| Resource Exhaustion | |
| Allocation of Resources Without Limits or Throttling | |
| Missing Release of Resource after Effective Lifetime | |
| CRLF Injection | |
| Improper Access Control | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Algorithmic Complexity | |
| HTTP Request Smuggling | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| CVE-2026-8763 | |
| CVE-2026-13506 | |
| Insufficient Verification of Data Authenticity | |
| Insufficient Verification of Data Authenticity | |