| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Replicating Malicious Code (Virus or Worm) | |
| Encoding Error | |
| Uncontrolled Memory Allocation | |
| Improper Certificate Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Uncontrolled Recursion | |
| Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') | |
| Improper Input Validation | |
| Improper Input Validation | |
| CVE-2026-19032 | |
| Server-Side Request Forgery (SSRF) | |
| CVE-2026-68497 | |
| CVE-2026-83557 | |
| Directory Traversal | |
| Incorrect Authorization | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Interpretation Conflict | |
| GHSA-mhm7-754m-9p8w | |
| Algorithmic Complexity | |
| Improper Check for Unusual or Exceptional Conditions | |
| Information Exposure Through Caching | |
| Missing Lock Check | |
| CVE-2026-54905 | |
| Improper Encoding or Escaping of Output | |
| Improper Access Control | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| HTTP Request Smuggling | |
| CRLF Injection | |
| Resource Exhaustion | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Resource Exhaustion | |
| Use After Free | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| GHSA-r7wm-3cxj-wff9 | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Server-Side Request Forgery (SSRF) | |
| CVE-2025-14813 | |
| Incomplete Blacklist | |
| Incomplete Blacklist | |
| HTTP Request Smuggling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Uncontrolled Recursion | |
| Improper Verification of Cryptographic Signature | |
| Improper Access Control | |
| Resource Exhaustion | |
| Allocation of Resources Without Limits or Throttling | |
| Authentication Bypass | |
| Improper Authentication | |
| Information Exposure | |
| CVE-2025-12183 | |
| Server-Side Request Forgery (SSRF) | |
| Resource Exhaustion | |
| GHSA-v2fc-qm4h-8hqv | |
| HTTP Request Smuggling | |
| Integer Overflow or Wraparound | |
| HTTP Request Smuggling | |
| GHSA-c4rq-3m3g-8wgx | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| CVE-2026-42499 | |
| Allocation of Resources Without Limits or Throttling | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Cross-site Scripting (XSS) | |
| Missing Report of Error Condition | |
| CVE-2026-42501 | |
| CRLF Injection | |
| Link Following | |
| CVE-2026-39825 | |
| Allocation of Resources Without Limits or Throttling | |
| Double Free | |
| NULL Pointer Dereference | |
| Out-of-bounds Write | |
| Improper Encoding or Escaping of Output | |
| Arbitrary Command Injection | |
| Algorithmic Complexity | |
| Arbitrary Command Injection | |
| Interpretation Conflict | |
| Partial Comparison | |
| Resource Exhaustion | |
| Permissive Regular Expression | |
| Incorrect Behavior Order: Validate Before Canonicalize | |
| Resource Exhaustion | |
| Interpretation Conflict | |
| Resource Exhaustion | |
| Improper Authentication | |
| Permissive Regular Expression | |
| Resource Exhaustion | |
| Inefficient Regular Expression Complexity | |
| Improper Handling of Length Parameter Inconsistency | |
| Improper Validation of Syntactic Correctness of Input | |
| CVE-2026-0636 | |
| Improper Encoding or Escaping of Output | |
| Improper Encoding or Escaping of Output | |
| CVE-2026-5588 | |
| Improper Validation of Certificate with Host Mismatch | |
| Protection Mechanism Failure | |
| CVE-2026-5598 | |
| Information Exposure Through Server Log Files | |
| CVE-2026-27143 | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Race Condition | |
| Allocation of Resources Without Limits or Throttling | |
| Incorrect Authorization | |
| CVE-2026-32280 | |
| Link Following | |
| Cross-site Scripting (XSS) | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Certificate Validation | |
| HTTP Request Smuggling | |
| Uncontrolled Recursion | |
| GHSA-72hv-8253-57qq | |
| Cross-site Scripting (XSS) | |
| Directory Traversal | |
| Direct Request ('Forced Browsing') | |
| Arbitrary Code Injection | |
| Directory Traversal | |
| GHSA-wx95-c6cv-8532 | |
| Cross-site Scripting (XSS) | |
| Server-Side Request Forgery (SSRF) | |
| CVE-2025-68121 | |
| CVE-2025-61732 | |
| Allocation of Resources Without Limits or Throttling | |
| Out-of-bounds Write | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2025-61730 | |
| CVE-2025-61731 | |
| Information Exposure | |
| CVE-2025-14762 | |
| Improper Certificate Validation | |
| CRLF Injection | |
| Improper Certificate Validation | |
| Improper Certificate Validation | |
| Information Exposure Through Log Files | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2025-58183 | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2025-61725 | |
| Algorithmic Complexity | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2025-58186 | |
| Improper Certificate Validation | |
| CVE-2025-47912 | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Information Exposure | |
| Inefficient Regular Expression Complexity | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Allocation of Resources Without Limits or Throttling | |
| Inefficient Regular Expression Complexity | |
| Improper Cross-boundary Removal of Sensitive Data | |
| Improper Certificate Validation | |
| CVE-2025-8916 | |
