| Use of Less Trusted Source | |
| CVE-2026-16221 | |
| CVE-2026-13676 | |
| Race Condition | |
| CVE-2026-12590 | |
| GHSA-frvp-7c67-39w9 | |
| CVE-2026-14257 | |
| CVE-2026-13149 | |
| Cross-site Scripting (XSS) | |
| Inefficient Regular Expression Complexity | |
| Incorrect Regular Expression | |
| Information Exposure Through Caching | |
| CVE-2026-56761 | |
| Algorithmic Complexity | |
| Improper Authorization | |
| Improper Encoding or Escaping of Output | |
| CVE-2026-6321 | |
| Resource Exhaustion | |
| Directory Traversal | |
| CVE-2026-2391 | |
| Information Exposure | |
| Incorrect Behavior Order: Validate Before Canonicalize | |
| Resource Exhaustion | |
| Arbitrary Code Injection | |
| Arbitrary Code Injection | |
| Insufficient Verification of Data Authenticity | |
| Incorrect Regular Expression | |
| CVE-2026-39410 | |
| Arbitrary Code Injection | |
| Inefficient Regular Expression Complexity | |
| Improper Handling of URL Encoding (Hex Encoding) | |
| GHSA-v8w9-8mx6-g223 | |
| Improper Validation of Specified Quantity in Input | |
| Improper Verification of Cryptographic Signature | |
| Directory Traversal | |
| CVE-2026-4923 | |
| HTTP Response Splitting | |
| Inefficient Regular Expression Complexity | |
| Incorrect Authorization | |
| Improper Verification of Cryptographic Signature | |
| Overly Permissive Cross-domain Whitelist | |
| HTTP Request Smuggling | |
| Cross-site Scripting (XSS) | |
| CVE-2026-4926 | |
| Resource Exhaustion | |
| Use of Less Trusted Source | |
| Directory Traversal | |
| GHSA-26pp-8wgv-hjvm | |
| Information Exposure Through Caching | |
| CVE-2026-6322 | |
| CVE-2026-8723 | |
| CVE-2025-15284 | |
| Race Condition | |
| Directory Traversal | |
| Inappropriate Comment Style | |
| GHSA-gq3j-xvxp-8hrf | |
