| Insufficient Comparison | |
| GHSA-h3mg-xc3c-68pw | |
| GHSA-j6r3-76f7-8jcv | |
| Server-Side Request Forgery (SSRF) | |
| Resource Exhaustion | |
| GHSA-2vr4-cq9g-pvrc | |
| Insufficient Comparison | |
| GHSA-rpw4-54j3-4h4q | |
| Cross-site Scripting (XSS) | |
| GHSA-jrc7-96c5-q579 | |
| Arbitrary Code Injection | |
| Incomplete Blacklist | |
| Improper Encoding or Escaping of Output | |
| GHSA-p8wg-vrv2-v86f | |
| GHSA-8r5x-fm3f-whwj | |
| GHSA-xw65-4hp5-5hc7 | |
| Improper Validation of Specified Quantity in Input | |
| GHSA-wr44-6hxh-3jwq | |
| GHSA-4p3w-j4w9-5jqw | |
| GHSA-68fv-2mgg-jv7q | |
| CVE-2026-17495 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Inefficient Regular Expression Complexity | |
| Inefficient Regular Expression Complexity | |
| GHSA-mrx9-2rrp-rhpx | |
| GHSA-c475-qrg2-pj4r | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| GHSA-qhr7-859c-m2p7 | |
| GHSA-q2hr-2g5m-vwhr | |
| GHSA-6j4f-fj2g-mc7p | |
| Resource Exhaustion | |
| GHSA-jxrp-r7gx-q4j8 | |
| Cross-site Scripting (XSS) | |
| GHSA-542g-h47m-68v8 | |
| GHSA-x97p-jq2g-jp4f | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Server-Side Request Forgery (SSRF) | |
| GHSA-mghh-pgcx-3jjj | |
| Resource Exhaustion | |
| GHSA-r4gj-5m52-g5wh | |
| GHSA-vh66-26gq-q6x8 | |
| Protection Mechanism Failure | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Unintended Proxy or Intermediary ('Confused Deputy') | |
| GHSA-4hqw-qxg8-jxx2 | |
| GHSA-3pq3-5fj3-cg6v | |
| GHSA-44g4-m2mj-wpvx | |
| Arbitrary Code Injection | |
| GHSA-9fr6-4gfg-395g | |
| GHSA-m8m8-qj5v-23w3 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Inefficient Regular Expression Complexity | |
| Resource Exhaustion | |
| GHSA-c29m-xwm3-cm6r | |
| Unintended Proxy or Intermediary ('Confused Deputy') | |
| Arbitrary Code Injection | |
| GHSA-j8rh-479h-cp32 | |
| GHSA-6h2x-m376-mqjq | |
| GHSA-58mr-gqgx-xq4g | |
| GHSA-qw65-cvwx-89v3 | |
| CVE-2026-84394 | |
| CVE-2026-84292 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-gg4h-3hg2-grpc | |
| GHSA-6w3j-5fw6-r9vr | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Resource Exhaustion | |
| GHSA-2883-xcg3-v3hh | |
| Uncontrolled Recursion | |
| GHSA-3mcp-22mf-vrw3 | |
| CVE-2026-45822 | |
| GHSA-vcc3-ghjq-m6fr | |
| GHSA-fph4-wmhf-6fwf | |
| GHSA-f65p-4m7j-42xc | |
| CVE-2026-76172 | |
| GHSA-jqff-g426-hqxp | |
| GHSA-4mjr-xmp4-gh2g | |
| CVE-2026-82417 | |
| CVE-2026-82562 | |
| CVE-2026-75975 | |
| GHSA-x5fp-wj9c-mxmx | |
| CVE-2026-75899 | |
| CVE-2026-75931 | |
| GHSA-5jgf-p345-68v8 | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Information Exposure | |
| Permissive Whitelist | |
| GHSA-9wx3-p993-35vp | |
| GHSA-fqj3-h9pc-443h | |
| GHSA-fq2j-3j99-rx65 | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-6hqm-hm2v-3p2p | |
| GHSA-39j5-w47m-2gmv | |
| GHSA-68jp-44vc-2x5h | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-f2r5-pqh9-r8f8 | |
| GHSA-4ww2-rjh2-xpv9 | |
| Resource Exhaustion | |
| Resource Exhaustion | |
| Information Exposure | |
| Uncaught Exception | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-rcvq-m9j9-6f4g | |
| GHSA-vhjm-w67q-g75c | |
| Directory Traversal | |
| GHSA-q7cg-457f-vx79 | |
| GHSA-rmmh-p597-ppvv | |
| GHSA-cr32-g25g-vxjj | |
| GHSA-8988-4f7v-96qf | |
| Cross-site Scripting (XSS) | |
| GHSA-22g5-r2x5-97cx | |
| GHSA-x426-x7cc-3fpc | |
| Cross-site Scripting (XSS) | |
| CVE-2024-1899 | |
| Cleartext Transmission of Sensitive Information | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| GHSA-28wg-ghj8-5hjv | |
| GHSA-5p4m-2wfm-xmqj | |
| GHSA-38gx-cfqf-f652 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-rgw5-rvv9-x895 | |
| Resource Exhaustion | |
| CVE-2026-18446 | |
| GHSA-7p8r-x3mc-p8w7 | |
| GHSA-mwp4-54f8-5fhr | |
| Improper Input Validation | |
| Improper Input Validation | |
| GHSA-4xrf-jv44-h6hh | |
| Improper Input Validation | |
| GHSA-22jq-vg5j-6vgg | |
| CVE-2026-16221 | |
| GHSA-pmv8-rq9r-6j72 | |
| GHSA-jqh4-m9w3-8hp9 | |
| GHSA-hcpx-6fm6-wx23 | |
| GHSA-f4gw-2p7v-4548 | |
| GHSA-7q8q-rj6j-mhjq | |
| GHSA-mwf2-3pr3-8698 | |
| GHSA-xj6q-8x83-jv6g | |
| GHSA-42h9-826w-cgv3 | |
| CVE-2026-14257 | |
| GHSA-mmx7-hfxf-jppx | |
| GHSA-mh99-v99m-4gvg | |
| GHSA-52cp-r559-cp3m | |
| Algorithmic Complexity | |
| GHSA-v2hh-gcrm-f6hx | |
| GHSA-gcfj-64vw-6mp9 | |
| GHSA-4c8g-83qw-93j6 | |
| CVE-2026-13676 | |
| CVE-2026-13149 | |
| GHSA-3jxr-9vmj-r5cp | |
| GHSA-r292-9mhp-454m | |
| GHSA-c2j3-45gr-mqc4 | |
| Protection Mechanism Failure | |
| Insufficient Comparison | |
| Inefficient Regular Expression Complexity | |
| GHSA-22p9-wv53-3rq4 | |
| GHSA-g27c-q7cp-mhx6 | |
| CVE-2026-9673 | |
| GHSA-fgmj-fm8m-jvvx | |
| CVE-2026-45249 | |
| CVE-2026-12143 | |
| Resource Exhaustion | |
| Interpretation Conflict | |
| Algorithmic Complexity | |
| GHSA-96hv-2xvq-fx4p | |
| GHSA-36hh-x5p5-jgc8 | |
| GHSA-hmw2-7cc7-3qxx | |
| GHSA-h67p-54hq-rp68 | |
| Improper Input Validation | |
| GHSA-vxr8-fq34-vvx9 | |
| GHSA-7c78-jf6q-g5cm | |
| GHSA-pjwm-pj3p-43mv | |
| HTTP Response Splitting | |
| Unintended Proxy or Intermediary ('Confused Deputy') | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-35jp-ww65-95wh | |
| Server-Side Request Forgery (SSRF) | |
| GHSA-qjx8-664m-686j | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-898c-q2cr-xwhg | |
| GHSA-654m-c8p4-x5fp | |
| GHSA-ph9p-34f9-6g65 | |
| Directory Traversal | |
| GHSA-jxxr-4gwj-5jf2 | |
| GHSA-58qx-3vcg-4xpx | |
| Use of Uninitialized Resource | |
| Resource Exhaustion | |
| GHSA-298w-vvm4-ww55 | |
| GHSA-q8mj-m7cp-5q26 | |
| CVE-2026-8723 | |
| CVE-2026-6322 | |
| CVE-2026-6321 | |
| GHSA-v39h-62p7-jpjc | |
| XML Injection | |
| GHSA-q3j6-qgpj-74h6 | |
| GHSA-5wm8-gmm8-39j9 | |
| GHSA-w9j2-pvgh-6h63 | |
| Cross-site Scripting (XSS) | |
| Uncontrolled Recursion | |
| GHSA-62hf-57xw-28j9 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-445q-vr5w-6q77 | |
| GHSA-v9jr-rg53-9pgp | |
| GHSA-q8qp-cvcw-x6jj | |
| GHSA-h7mw-gpvr-xq4m | |
| GHSA-crv5-9vww-q3g8 | |
| GHSA-v2v4-37r5-5v8g | |
| Improper Encoding or Escaping of Output | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| GHSA-6chq-wfr3-2hj9 | |
| GHSA-39q2-94rc-95cp | |
| GHSA-m7pr-hjqh-92cm | |
| GHSA-vf2m-468p-8v99 | |
| Cross-site Scripting (XSS) | |
| GHSA-pmwg-cvhr-8vh7 | |
| GHSA-3w6x-2g7m-8v23 | |
| HTTP Response Splitting | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-gh4j-gqv2-49f6 | |
| GHSA-pf86-5x62-jrwf | |
| Improper Authentication | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-xx6v-rp6x-q39c | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Permissive Whitelist | |
| GHSA-5c9x-8gcm-mpgx | |
| CRLF Injection | |
| Server-Side Request Forgery (SSRF) | |
| GHSA-xhjh-pmcv-23jw | |
| Permissive Whitelist | |
| XML Injection | |
| Cross-site Scripting (XSS) | |
| GHSA-w5hq-g745-h8pq | |
| Out-of-bounds Write | |
| Resource Exhaustion | |
| GHSA-r4q5-vmmm-2653 | |
| CVE-2026-5758 | |
| GHSA-j452-xhg8-qg39 | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| GHSA-rp42-5vxx-qpwr | |
| GHSA-f23m-r3pf-42rh | |
| GHSA-6v7q-wjvx-w8wg | |
| CRLF Injection | |
| GHSA-r5fr-rjxr-66jc | |
| CVE-2026-2950 | |
| CVE-2026-4800 | |
| HTTP Response Splitting | |
| GHSA-jg4p-7fhp-p32p | |
| Inefficient Regular Expression Complexity | |
| GHSA-fvcv-3m26-pcqx | |
| Unintended Proxy or Intermediary ('Confused Deputy') | |
| GHSA-3p68-rc4w-qgx5 | |
| GHSA-chqc-8p9q-pq6q | |
| GHSA-jvff-x2qm-6286 | |
| Arbitrary Code Injection | |
| Cross-site Scripting (XSS) | |
| GHSA-442j-39wm-28r2 | |
| GHSA-7rx3-28cr-v5wh | |
| Arbitrary Code Injection | |
| Arbitrary Code Injection | |
| GHSA-3mfm-83xf-c92r | |
| GHSA-f886-m6hf-6m8v | |
| GHSA-xjpj-3mr7-gcpf | |
| Cross-site Scripting (XSS) | |
| GHSA-9cx6-37pm-9jff | |
| GHSA-xhpv-hc6g-r9c6 | |
| Improper Check for Unusual or Exceptional Conditions | |
| GHSA-2w6w-674q-4c4q | |
| Resource Exhaustion | |
| GHSA-2qvq-rjwj-gvw9 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| GHSA-c2c7-rcm5-vvqj | |
| GHSA-3v7f-55p6-f55p | |
| GHSA-2328-f5f3-gj25 | |
| GHSA-ppp5-5v6c-4jwp | |
| Improper Input Validation | |
| GHSA-q67f-28xg-22rw | |
| Improper Verification of Cryptographic Signature | |
| Inefficient Regular Expression Complexity | |
| Improper Certificate Validation | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-5m6q-g25r-mvwx | |
| Uncontrolled Recursion | |
| GHSA-48c2-rrv3-qjmp | |
| GHSA-7x6v-j9x4-qf24 | |
| Improper Encoding or Escaping of Output | |
| GHSA-wfv2-pwc8-crg5 | |
| Cross-site Scripting (XSS) | |
| GHSA-gmq8-994r-jv83 | |
| Off-by-one Error | |
| Inefficient Regular Expression Complexity | |
| GHSA-2g4f-4pwh-qvx6 | |
| GHSA-vpq2-c234-7xj6 | |
| CVE-2026-3449 | |
| Cross-site Scripting (XSS) | |
| Inefficient Regular Expression Complexity | |
| Cross-site Scripting (XSS) | |
| GHSA-5c6j-r48x-rmvq | |
| GHSA-7r86-cg39-jmmj | |
| GHSA-v2wj-7wpq-c8vv | |
| GHSA-v8jm-5vwx-cfxm | |
| Inefficient Regular Expression Complexity | |
| Algorithmic Complexity | |
| GHSA-23c5-xmqv-rm74 | |
| GHSA-3ppc-4f35-3m26 | |
| CVE-2026-2739 | |
| Arbitrary Code Injection | |
| GHSA-67pg-wm7f-q7fj | |
| Link Following | |
| Resource Exhaustion | |
| CVE-2025-15284 | |
| GHSA-6rw7-vpxm-498p | |
| GHSA-83g3-92jg-28cx | |
| GHSA-52f5-9888-hmc6 | |
| GHSA-378v-28hj-76wf | |
| Directory Traversal | |
| Improper Encoding or Escaping of Output | |
| GHSA-p5xg-68wr-hm3m | |
| GHSA-9vjf-qc39-jprp | |
| GHSA-w7fw-mjwx-w883 | |
| Race Condition | |
| Improper Check for Unusual or Exceptional Conditions | |
| GHSA-xxjr-mmjv-4gpg | |
| Directory Traversal | |
| GHSA-4hjh-wcwx-xvwj | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-cjw8-79x6-5cj4 | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-f8cm-6447-x5h2 | |
| Directory Traversal | |
| GHSA-fj3w-jwp8-x2g3 | |
| Resource Exhaustion | |
| Integer Overflow or Wraparound | |
| Directory Traversal | |
| GHSA-848j-6mx2-7j84 | |
| GHSA-v6h2-p8h4-qcjw | |
| GHSA-5gfm-wpxj-wjgq | |
| GHSA-95fx-jjr5-f39c | |
| Buffer Overflow | |
| CVE-2025-14505 | |
| GHSA-34x7-hfp2-rc4v | |
| GHSA-37qj-frw5-hhjh | |
| Directory Traversal | |
| Improper Input Validation | |
| CVE-2025-13465 | |
| GHSA-6475-r3vj-m8vf | |
| CVE-2025-12816 | |
| GHSA-65ch-62r8-g69g | |
| CVE-2025-7783 | |
| GHSA-fjxv-7rqg-78g4 | |
| CVE-2026-2391 | |
| GHSA-8qq5-rm4j-mr97 | |
| GHSA-mh29-5h37-fv8m | |
| GHSA-r6q2-hw4h-h46w | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-cpq7-6gpm-g9rc | |
| GHSA-8mvj-3j78-4qmw | |
| GHSA-pqxr-3g65-p328 | |
| Improper Input Validation | |
| CVE-2025-9287 | |
| Arbitrary Code Injection | |
| GHSA-vm32-vv63-w422 | |
| CVE-2025-57352 | |
| GHSA-554w-wpv2-vw27 | |
| GHSA-43fc-jf86-j433 | |
| Improper Encoding or Escaping of Output | |
| CVE-2025-9288 | |
| GHSA-95m3-7q98-8xr5 | |
| GHSA-rx8g-88g5-qh64 | |
| Uncontrolled Recursion | |
| GHSA-5rq4-664w-9x2c | |
| Improper Handling of Unicode Encoding | |
