| Resource Exhaustion | |
| Missing Authorization | |
| CVE-2026-39821 | |
| Integer Overflow or Wraparound | |
| CVE-2026-46595 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Cross-site Scripting (XSS) | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Incorrect Type Conversion or Cast | |
| Deserialization of Untrusted Data | |
| Out-of-Bounds | |
| Improper Enforcement of Message Integrity During Transmission in a Communication Channel | |
| Improper Certificate Validation | |
| Improper Verification of Cryptographic Signature | |
| Improper Certificate Validation | |
| CVE-2026-46598 | |
| CVE-2026-39824 | |
| Missing Authorization | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Improper Certificate Validation | |
| CVE-2026-42504 | |
| CVE-2026-27145 | |
| CVE-2026-42507 | |
| GHSA-pmwq-pjrm-6p5r | |
| Cross-site Scripting (XSS) | |
| Double Free | |
| Allocation of Resources Without Limits or Throttling | |
| NULL Pointer Dereference | |
| CVE-2026-39825 | |
| CVE-2026-42501 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| CVE-2026-42499 | |
| Link Following | |
| Out-of-bounds Write | |
| Improper Encoding or Escaping of Output | |
| Integer Overflow or Wraparound | |