| CRLF Injection | |
| Allocation of Resources Without Limits or Throttling | |
| Resource Exhaustion | |
| HTTP Request Smuggling | |
| Memory Leak | |
| Improper Input Validation | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Not Failing Securely ('Failing Open') | |
| Origin Validation Error | |
| Resource Exhaustion | |
| HTTP Response Splitting | |
| Improper Input Validation | |
| Deserialization of Untrusted Data | |
| HTTP Response Splitting | |
| HTTP Request Smuggling | |
| HTTP Response Splitting | |
| Reliance on Untrusted Inputs in a Security Decision | |
| Out-of-bounds Read | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Initialization | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| CVE-2026-34518 | |
| HTTP Request Smuggling | |
| Directory Traversal | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Improper Validation of Certificate with Host Mismatch | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| HTTP Request Smuggling | |
| Missing Encryption of Sensitive Data | |
| HTTP Request Smuggling | |
| Reliance on Cookies without Validation and Integrity Checking | |