druid

Uncontrolled Memory Allocation

<37.0.0-r54

<37.0.0-r54

<37.0.0-r54

<37.0.0-r54

<37.0.0-r54

<37.0.0-r54

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<37.0.0-r54

<37.0.0-r54

<37.0.0-r54

GHSA-qx7j-jv8m-fppr

<37.0.0-r54

Incorrect Permission Assignment for Critical Resource

<37.0.0-r54

GHSA-6g32-pxv4-2wfj

<37.0.0-r54

GHSA-hgj6-7826-r7m5

<37.0.0-r19

CVE-2022-3510

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r19

<37.0.0-r19

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<37.0.0-r14

GHSA-r7wm-3cxj-wff9

<37.0.0-r43

GHSA-5mg8-w23w-74h3

<37.0.0-r14

<37.0.0-r43

<35.0.1-r1

GHSA-wjpw-4j6x-6rwh

<37.0.0-r14

Out-of-bounds Write

<37.0.0-r14

<37.0.0-r14

Incorrect Permission Assignment for Critical Resource

<35.0.1-r1

GHSA-9vjp-v76f-g363

<34.0.0-r6

<35.0.1-r1

GHSA-jr6h-r7vg-f9mc

<36.0.0-r0

GHSA-cqqj-4p63-rrmm

<34.0.0-r6

GHSA-grg4-wf29-r9vv

<34.0.0-r6

<34.0.0-r6

<35.0.1-r1

<35.0.1-r1

<35.0.1-r1

<37.0.0-r19

Server-Side Request Forgery (SSRF)

<37.0.0-r14

<37.0.0-r19

<37.0.0-r14

<37.0.0-r14

<35.0.1-r1

<36.0.0-r0

File and Directory Information Exposure

<35.0.1-r1

<35.0.1-r1

<37.0.0-r19

<37.0.0-r14

<37.0.0-r14

<37.0.0-r43

Loop with Unreachable Exit Condition ('Infinite Loop')

<37.0.0-r14

<35.0.1-r1

<34.0.0-r6

<34.0.0-r6

<35.0.1-r1

<35.0.1-r1

<34.0.0-r6

<35.0.1-r1

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r42

<34.0.0-r6

Stack-based Buffer Overflow

<35.0.1-r1

<35.0.1-r1

<35.0.1-r1

<35.0.1-r1

<35.0.1-r1

<37.0.0-r16

<37.0.0-r14

GHSA-3wrr-7qpf-2prh

<37.0.0-r16

GHSA-h4h5-3hr4-j3g2

<37.0.0-r14

GHSA-gwrp-pvrq-jmwv

<35.0.1-r1

Allocation of Resources Without Limits or Throttling

<35.0.1-r1

SQL Injection

<35.0.1-r1

GHSA-f7vh-qwp3-x37m

<35.0.1-r1

Information Exposure Through Caching

<37.0.0-r53

GHSA-8c42-7qj2-3j46

<37.0.0-r53

Improper Encoding or Escaping of Output

<37.0.0-r52

GHSA-qv9r-c865-cp47

<37.0.0-r52

Missing Release of Resource after Effective Lifetime

<37.0.0-r51

GHSA-hjcp-jmpx-g3qm

<37.0.0-r51

CVE-2026-54428

<37.0.0-r50

GHSA-v3jc-474w-2wm6

<37.0.0-r50

Missing Release of Resource after Effective Lifetime

<37.0.0-r47

GHSA-hf6x-8p5f-cgmf

<37.0.0-r49

CVE-2026-54399

<37.0.0-r49

NULL Pointer Dereference

<37.0.0-r48

<37.0.0-r48

<37.0.0-r47

<37.0.0-r47

<37.0.0-r47

<37.0.0-r47

<37.0.0-r47

<37.0.0-r47

GHSA-mfg7-5gfp-c4w3

<37.0.0-r47

Information Exposure

<37.0.0-r47

GHSA-f4v5-65jj-pcr2

<37.0.0-r47

Improper Handling of Alternate Encoding

<37.0.0-r47

<37.0.0-r47

Use of Non-Canonical URL Paths for Authorization Decisions

<37.0.0-r47

<37.0.0-r47

<37.0.0-r45

<37.0.0-r45

<37.0.0-r45

<37.0.0-r45

<37.0.0-r45

<37.0.0-r45

<37.0.0-r45

<37.0.0-r45

Allocation of Resources Without Limits or Throttling

<37.0.0-r45

GHSA-4mp9-239f-g9hg

<37.0.0-r45

<37.0.0-r45

GHSA-6jqx-86gh-f27w

<37.0.0-r45

Loop with Unreachable Exit Condition ('Infinite Loop')

<37.0.0-r45

Improper Access Control

<37.0.0-r45

GHSA-558v-64gr-wgg4

<37.0.0-r44

<37.0.0-r44

GHSA-5gvw-p9qm-jgwh

<37.0.0-r43

GHSA-mhm7-754m-9p8w

<37.0.0-r43

Incorrect Authorization

<37.0.0-r43

Not Failing Securely ('Failing Open')

<37.0.0-r43

GHSA-j92g-9f8w-j867

<37.0.0-r43

<37.0.0-r14

Improperly Controlled Modification of Dynamically-Determined Object Attributes

<37.0.0-r14

Incorrect Authorization

<37.0.0-r19

GHSA-5hh8-q8hv-fr38

<37.0.0-r19

GHSA-9fxm-vc8v-hj55

<37.0.0-r19

<37.0.0-r19

Allocation of Resources Without Limits or Throttling

<37.0.0-r19

GHSA-3g76-f9xq-8vp6

<37.0.0-r19

Incorrect Authorization

<37.0.0-r19

<37.0.0-r19

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

GHSA-58qw-p7qm-5rvh

<37.0.0-r14

Allocation of Resources Without Limits or Throttling

<37.0.0-r14

Out-of-bounds Write

<37.0.0-r14

GHSA-47qp-hqvx-6r3f

<37.0.0-r14

<37.0.0-r14

GHSA-493p-pfq6-5258

<37.0.0-r14

GHSA-gvpg-vgmx-xg6w

<37.0.0-r14

<37.0.0-r14

GHSA-rhrv-645h-fjfh

<37.0.0-r14

Improper Handling of Length Parameter Inconsistency

<37.0.0-r14

GHSA-337m-mw94-2v6g

<37.0.0-r14

GHSA-wf8f-6423-gfxg

<37.0.0-r14

GHSA-xjp4-hw94-mvp5

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

Loop with Unreachable Exit Condition ('Infinite Loop')

<37.0.0-r14

<37.0.0-r14

Out-of-bounds Write

<37.0.0-r14

GHSA-9w38-p64v-xpmv

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r14

<37.0.0-r13

<37.0.0-r13

<37.0.0-r13

Allocation of Resources Without Limits or Throttling

<37.0.0-r13

<37.0.0-r13

<37.0.0-r13

<37.0.0-r13

<37.0.0-r13

<37.0.0-r12

Insufficient Verification of Data Authenticity

<37.0.0-r12

GHSA-xmv7-r254-6q78

<37.0.0-r12

GHSA-5pvg-856g-cp85

<37.0.0-r12

GHSA-676x-f7gg-47vc

<37.0.0-r12

Improper Verification of Cryptographic Signature

<37.0.0-r12

GHSA-3qp7-7mw8-wx86

<37.0.0-r12

Allocation of Resources Without Limits or Throttling

<37.0.0-r12

Use of Insufficiently Random Values

<37.0.0-r12

Insufficient Verification of Data Authenticity

<37.0.0-r12

GHSA-w573-9ffj-6ff9

<37.0.0-r12

Information Exposure

<37.0.0-r12

GHSA-c653-97m9-rcg9

<37.0.0-r12

Improper Access Control

<37.0.0-r12

HTTP Response Splitting

<37.0.0-r9

<37.0.0-r9

<37.0.0-r9

<37.0.0-r9

<37.0.0-r9

Missing Release of Resource after Effective Lifetime

<37.0.0-r9

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

Allocation of Resources Without Limits or Throttling

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

<37.0.0-r8

Creation of Temporary File With Insecure Permissions

<37.0.0-r6

<37.0.0-r6

<37.0.0-r5

<37.0.0-r5

<37.0.0-r4

<37.0.0-r4

<37.0.0-r3

Allocation of Resources Without Limits or Throttling

<37.0.0-r3

GHSA-98qh-xjc8-98pq

<37.0.0-r2

<37.0.0-r2

GHSA-xxqh-mfjm-7mv9

<37.0.0-r1

GHSA-57rv-r2g8-2cj3

<37.0.0-r1

<37.0.0-r1

GHSA-m4cv-j2px-7723

<37.0.0-r1

Integer Overflow or Wraparound

<37.0.0-r1

<37.0.0-r1

GHSA-38f8-5428-x5cv

<37.0.0-r1

GHSA-v8h7-rr48-vmmv

<37.0.0-r1

Allocation of Resources Without Limits or Throttling

<37.0.0-r1

CRLF Injection

<37.0.0-r1

GHSA-qcwq-55hx-v3vh

<37.0.0-r0

<37.0.0-r0

Integer Overflow or Wraparound

<37.0.0-r0

GHSA-6fmv-xxpf-w3cw

<37.0.0-r0

Integer Overflow or Wraparound

<37.0.0-r0

GHSA-55g7-9cwv-5qfv

<37.0.0-r0

Allocation of Resources Without Limits or Throttling

<37.0.0-r0

<37.0.0-r0

<37.0.0-r0

<37.0.0-r0

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

Improper Encoding or Escaping of Output

<36.0.0-r15

CVE-2026-0636

<36.0.0-r15

GHSA-wg6q-6289-32hp

<36.0.0-r15

Cross-site Request Forgery (CSRF)

<36.0.0-r15

Information Exposure Through Server Log Files

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r15

<36.0.0-r13

Improper Encoding or Escaping of Output

<36.0.0-r13

GHSA-w9fj-cfpg-grvv

<36.0.0-r12

Allocation of Resources Without Limits or Throttling

<36.0.0-r11

GHSA-pwqr-wmgm-9rr8

<36.0.0-r11

<36.0.0-r12

GHSA-vx9q-rhv9-3jvg

<36.0.0-r10

Out-of-bounds Read

<36.0.0-r10

GHSA-crhr-qqj8-rpxc

<36.0.0-r5

Information Exposure Through Log Files

<36.0.0-r5

GHSA-xxh7-fcf3-rj7f

<36.0.0-r4

Arbitrary Code Injection

<36.0.0-r3

<36.0.0-r4

GHSA-c87w-642h-m97h

<36.0.0-r3

Arbitrary Code Injection

<36.0.0-r1

GHSA-q6g2-g7f3-rr83

<35.0.1-r5

<32.0.1-r1

<35.0.1-r5

<35.0.1-r8

GHSA-xrj7-x7gp-wwqr

<32.0.1-r1

CVE-2024-36114

<32.0.1-r1

GHSA-prj3-ccx8-p6x4

<34.0.0-r1

Allocation of Resources Without Limits or Throttling

<32.0.1-r2

<34.0.0-r6

<31.0.0-r2

<35.0.1-r5

<33.0.0-r8

<32.0.1-r1

<35.0.1-r5

<34.0.0-r6

<31.0.0-r1

<35.0.1-r5

<35.0.1-r5

<35.0.1-r1

<35.0.1-r5

<35.0.1-r5

<34.0.0-r3

<32.0.1-r1

<32.0.0-r5

<33.0.0-r4

<30.0.1-r0

NULL Pointer Dereference

<34.0.0-r6

CVE-2025-22227

<33.0.0-r8

Allocation of Resources Without Limits or Throttling

<35.0.1-r5

<34.0.0-r1

GHSA-cphf-4846-3xx9

<35.0.1-r8

GHSA-g8m5-722r-8whq

<31.0.0-r1

GHSA-2c59-37c4-qrx5

<32.0.1-r2

Improper Privilege Management

<31.0.0-r2

Arbitrary Code Injection

<32.0.1-r1

<35.0.1-r2

<30.0.1-r0

<36.0.0-r1

<34.0.0-r4

<35.0.1-r1

<32.0.1-r1

<34.0.0-r6

<35.0.1-r5

<33.0.0-r4

<32.0.1-r1

<34.0.0-r6

Improper Handling of Highly Compressed Data (Data Amplification)

<34.0.0-r4

CVE-2025-24970

<32.0.0-r5

GHSA-wjxj-f8rg-99wx

<32.0.1-r1

<34.0.0-r3

GHSA-crjg-w57m-rqqf

<34.0.0-r6