| Incomplete Blacklist | |
| Incomplete Blacklist | |
| CVE-2025-11226 | |
| Memory Leak | |
| HTTP Request Smuggling | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| CVE-2026-1225 | |
| CRLF Injection | |
| Allocation of Resources Without Limits or Throttling | |
| CRLF Injection | |
| Insufficient Verification of Data Authenticity | |
| HTTP Request Smuggling | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Improper Verification of Cryptographic Signature | |
| Improper Access Control | |
| Integer Overflow or Wraparound | |
| Insufficient Verification of Data Authenticity | |
| Improper Check or Handling of Exceptional Conditions | |
| HTTP Request Smuggling | |
| Improper Input Validation | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| Use of Insufficiently Random Values | |
| Resource Exhaustion | |
| HTTP Response Splitting | |