| Improper Verification of Cryptographic Signature | |
| Incomplete Blacklist | |
| Allocation of Resources Without Limits or Throttling | |
| Server-Side Request Forgery (SSRF) | |
| Resource Exhaustion | |
| Incomplete Blacklist | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Access Control | |
| Resource Exhaustion | |
| HTTP Request Smuggling | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| HTTP Response Splitting | |
| Integer Overflow or Wraparound | |
| HTTP Request Smuggling | |
| CRLF Injection | |
| Allocation of Resources Without Limits or Throttling | |
| HTTP Request Smuggling | |
| Deserialization of Untrusted Data | |
| Improper Encoding or Escaping of Output | |
| Improper Encoding or Escaping of Output | |
| Improper Output Neutralization for Logs | |
| CVE-2026-0636 | |
| Race Condition | |
| Improper Validation of Certificate with Host Mismatch | |
| CVE-2026-5588 | |
| Information Exposure Through Server Log Files | |
| CVE-2026-5598 | |
| GHSA-72hv-8253-57qq | |
| Information Exposure | |
| CRLF Injection | |
| Improper Certificate Validation | |
| XML External Entity (XXE) Injection | |
| Uncontrolled Recursion | |
| CVE-2025-27817 | |
| XML External Entity (XXE) Injection | |
| Uncontrolled Recursion | |
| CVE-2025-8885 | |
| Allocation of Resources Without Limits or Throttling | |
| Uncontrolled Recursion | |
| HTTP Request Smuggling | |
| CVE-2025-27820 | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| CVE-2025-48734 | |
| CVE-2025-22227 | |
| CVE-2025-8916 | |
| CVE-2024-57699 | |
| CVE-2025-31672 | |
