| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Improper Authorization | |
| Allocation of Resources Without Limits or Throttling | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Output Neutralization for Logs | |
| Allocation of Resources Without Limits or Throttling | |
| Information Exposure | |
| Expected Behavior Violation | |
| Expected Behavior Violation | |
| Information Exposure | |
| Improper Handling of Highly Compressed Data (Data Amplification) | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Incorrect Authorization | |
| Race Condition | |
| Arbitrary Code Injection | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Time-of-check Time-of-use (TOCTOU) | |
| Missing Authorization | |
| Allocation of Resources Without Limits or Throttling | |
| Missing Authentication for Critical Function | |
| Improper Certificate Validation | |
| Insecure Default Variable Initialization | |
| Insufficiently Protected Credentials | |
| Improper Access Control | |
| OS Command Injection | |
| Authentication Bypass by Primary Weakness | |
| Out-of-bounds Write | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Placement of User into Incorrect Group | |
| Time-of-check Time-of-use (TOCTOU) | |
| Missing Release of Resource after Effective Lifetime | |
| Resource Exhaustion | |
| Incorrect Default Permissions | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| NULL Pointer Dereference | |
| Link Following | |
| Resource Exhaustion | |
| Truncation of Security-relevant Information | |
| Allocation of Resources Without Limits or Throttling | |
| Buffer Access with Incorrect Length Value | |
| Algorithmic Complexity | |
| Improperly Controlled Sequential Memory Allocation | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Unchecked Return Value | |
| OS Command Injection | |
| CVE-2025-4673 | |
| Improper Validation of Syntactic Correctness of Input | |
| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Verification of Cryptographic Signature | |
| Improper Verification of Cryptographic Signature | |
| Information Exposure | |
| Information Exposure | |
| Information Exposure | |
| Resource Exhaustion | |
| Cross-site Scripting (XSS) | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Improper Input Validation | |
| Allocation of Resources Without Limits or Throttling | |
| Improper Handling of Exceptional Conditions | |
| Insufficient Entropy | |
| Insufficient Entropy | |
| Insufficient Entropy | |
| Improperly Controlled Sequential Memory Allocation | |
| Integer Overflow or Wraparound | |
| Integer Overflow or Wraparound | |
| Improperly Controlled Sequential Memory Allocation | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improperly Controlled Sequential Memory Allocation | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Directory Traversal | |
| Improperly Controlled Sequential Memory Allocation | |
| Information Exposure | |
| CVE-2022-41715 | |
| Improperly Controlled Sequential Memory Allocation | |
| HTTP Request Smuggling | |
| Improperly Controlled Sequential Memory Allocation | |
| Improperly Controlled Sequential Memory Allocation | |
| Allocation of Resources Without Limits or Throttling | |
| HTTP Request Smuggling | |
| Resource Exhaustion | |
| Use of Uninitialized Variable | |
| Use of Uninitialized Variable | |
| Memory Leak | |
| Memory Leak | |
| Improper Validation of Integrity Check Value | |
| Incorrect Authorization | |
| Improper Check for Unusual or Exceptional Conditions | |
| Improper Input Validation | |
| Resource Exhaustion | |
| Insufficient Granularity of Access Control | |
| Resource Exhaustion | |
| Improper Input Validation | |
| Improper Authentication | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Improper Preservation of Permissions | |
| OS Command Injection | |
| Authorization Bypass Through User-Controlled Key | |
| Authorization Bypass Through User-Controlled Key | |
| Authorization Bypass Through User-Controlled Key | |