| GHSA-g27c-q7cp-mhx6 | |
| CVE-2026-9673 | |
| GHSA-fgmj-fm8m-jvvx | |
| CVE-2026-45249 | |
| CVE-2026-12143 | |
| Resource Exhaustion | |
| CVE-2026-44974 | |
| Algorithmic Complexity | |
| GHSA-96hv-2xvq-fx4p | |
| GHSA-36hh-x5p5-jgc8 | |
| GHSA-hmw2-7cc7-3qxx | |
| GHSA-h67p-54hq-rp68 | |
| Improper Input Validation | |
| GHSA-vxr8-fq34-vvx9 | |
| GHSA-7c78-jf6q-g5cm | |
| GHSA-pjwm-pj3p-43mv | |
| HTTP Response Splitting | |
| Unintended Proxy or Intermediary ('Confused Deputy') | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-35jp-ww65-95wh | |
| Server-Side Request Forgery (SSRF) | |
| GHSA-qjx8-664m-686j | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-898c-q2cr-xwhg | |
| GHSA-654m-c8p4-x5fp | |
| GHSA-ph9p-34f9-6g65 | |
| Directory Traversal | |
| GHSA-jxxr-4gwj-5jf2 | |
| GHSA-58qx-3vcg-4xpx | |
| Use of Uninitialized Resource | |
| Resource Exhaustion | |
| GHSA-298w-vvm4-ww55 | |
| GHSA-q8mj-m7cp-5q26 | |
| CVE-2026-8723 | |
| CVE-2026-6322 | |
| CVE-2026-6321 | |
| GHSA-v39h-62p7-jpjc | |
| XML Injection | |
| GHSA-q3j6-qgpj-74h6 | |
| GHSA-5wm8-gmm8-39j9 | |
| GHSA-w9j2-pvgh-6h63 | |
| Cross-site Scripting (XSS) | |
| Uncontrolled Recursion | |
| GHSA-62hf-57xw-28j9 | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-445q-vr5w-6q77 | |
| GHSA-v9jr-rg53-9pgp | |
| GHSA-q8qp-cvcw-x6jj | |
| GHSA-h7mw-gpvr-xq4m | |
| GHSA-crv5-9vww-q3g8 | |
| GHSA-v2v4-37r5-5v8g | |
| Improper Encoding or Escaping of Output | |
| Allocation of Resources Without Limits or Throttling | |
| Cross-site Scripting (XSS) | |
| GHSA-6chq-wfr3-2hj9 | |
| GHSA-39q2-94rc-95cp | |
| GHSA-m7pr-hjqh-92cm | |
| GHSA-vf2m-468p-8v99 | |
| Cross-site Scripting (XSS) | |
| GHSA-pmwg-cvhr-8vh7 | |
| GHSA-3w6x-2g7m-8v23 | |
| HTTP Response Splitting | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-gh4j-gqv2-49f6 | |
| GHSA-pf86-5x62-jrwf | |
| Improper Authentication | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-xx6v-rp6x-q39c | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| Permissive Whitelist | |
| GHSA-5c9x-8gcm-mpgx | |
| CRLF Injection | |
| Server-Side Request Forgery (SSRF) | |
| GHSA-xhjh-pmcv-23jw | |
| Permissive Whitelist | |
| XML Injection | |
| Cross-site Scripting (XSS) | |
| GHSA-w5hq-g745-h8pq | |
| Out-of-bounds Write | |
| Resource Exhaustion | |
| GHSA-r4q5-vmmm-2653 | |
| CVE-2026-5758 | |
| GHSA-j452-xhg8-qg39 | |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | |
| GHSA-rp42-5vxx-qpwr | |
| GHSA-f23m-r3pf-42rh | |
| GHSA-6v7q-wjvx-w8wg | |
| CRLF Injection | |
| GHSA-r5fr-rjxr-66jc | |
| CVE-2026-2950 | |
| CVE-2026-4800 | |
| HTTP Response Splitting | |
| GHSA-jg4p-7fhp-p32p | |
| Inefficient Regular Expression Complexity | |
| GHSA-fvcv-3m26-pcqx | |
| Unintended Proxy or Intermediary ('Confused Deputy') | |
| GHSA-3p68-rc4w-qgx5 | |
| GHSA-chqc-8p9q-pq6q | |
| GHSA-jvff-x2qm-6286 | |
| Arbitrary Code Injection | |
| Cross-site Scripting (XSS) | |
| GHSA-442j-39wm-28r2 | |
| GHSA-7rx3-28cr-v5wh | |
| Arbitrary Code Injection | |
| Arbitrary Code Injection | |
| GHSA-3mfm-83xf-c92r | |
| GHSA-f886-m6hf-6m8v | |
| GHSA-xjpj-3mr7-gcpf | |
| Cross-site Scripting (XSS) | |
| GHSA-9cx6-37pm-9jff | |
| GHSA-xhpv-hc6g-r9c6 | |
| Improper Check for Unusual or Exceptional Conditions | |
| GHSA-2w6w-674q-4c4q | |
| Resource Exhaustion | |
| GHSA-2qvq-rjwj-gvw9 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| GHSA-c2c7-rcm5-vvqj | |
| GHSA-3v7f-55p6-f55p | |
| GHSA-2328-f5f3-gj25 | |
| GHSA-ppp5-5v6c-4jwp | |
| Improper Input Validation | |
| GHSA-q67f-28xg-22rw | |
| Improper Verification of Cryptographic Signature | |
| Inefficient Regular Expression Complexity | |
| Improper Certificate Validation | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-5m6q-g25r-mvwx | |
| Uncontrolled Recursion | |
| GHSA-48c2-rrv3-qjmp | |
| GHSA-7x6v-j9x4-qf24 | |
| Improper Encoding or Escaping of Output | |
| GHSA-wfv2-pwc8-crg5 | |
| Cross-site Scripting (XSS) | |
| GHSA-gmq8-994r-jv83 | |
| Off-by-one Error | |
| Inefficient Regular Expression Complexity | |
| GHSA-2g4f-4pwh-qvx6 | |
| GHSA-vpq2-c234-7xj6 | |
| CVE-2026-3449 | |
| Cross-site Scripting (XSS) | |
| Inefficient Regular Expression Complexity | |
| Cross-site Scripting (XSS) | |
| GHSA-5c6j-r48x-rmvq | |
| GHSA-7r86-cg39-jmmj | |
| GHSA-v2wj-7wpq-c8vv | |
| GHSA-v8jm-5vwx-cfxm | |
| Inefficient Regular Expression Complexity | |
| Algorithmic Complexity | |
| GHSA-23c5-xmqv-rm74 | |
| GHSA-3ppc-4f35-3m26 | |
| CVE-2026-2739 | |
| Arbitrary Code Injection | |
| GHSA-67pg-wm7f-q7fj | |
| Link Following | |
| Resource Exhaustion | |
| CVE-2025-15284 | |
| GHSA-6rw7-vpxm-498p | |
| GHSA-83g3-92jg-28cx | |
| GHSA-52f5-9888-hmc6 | |
| GHSA-378v-28hj-76wf | |
| Directory Traversal | |
| Improper Encoding or Escaping of Output | |
| GHSA-p5xg-68wr-hm3m | |
| GHSA-9vjf-qc39-jprp | |
| GHSA-w7fw-mjwx-w883 | |
| Race Condition | |
| Improper Check for Unusual or Exceptional Conditions | |
| GHSA-xxjr-mmjv-4gpg | |
| Directory Traversal | |
| GHSA-4hjh-wcwx-xvwj | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-cjw8-79x6-5cj4 | |
| Allocation of Resources Without Limits or Throttling | |
| GHSA-f8cm-6447-x5h2 | |
| Directory Traversal | |
| GHSA-fj3w-jwp8-x2g3 | |
| Resource Exhaustion | |
| Integer Overflow or Wraparound | |
| Directory Traversal | |
| GHSA-848j-6mx2-7j84 | |
| GHSA-v6h2-p8h4-qcjw | |
| GHSA-5gfm-wpxj-wjgq | |
| GHSA-95fx-jjr5-f39c | |
| Buffer Overflow | |
| CVE-2025-14505 | |
| GHSA-34x7-hfp2-rc4v | |
| GHSA-37qj-frw5-hhjh | |
| Directory Traversal | |
| Improper Input Validation | |
| CVE-2025-13465 | |
| GHSA-6475-r3vj-m8vf | |
| CVE-2025-12816 | |
| GHSA-65ch-62r8-g69g | |
| CVE-2025-7783 | |
| GHSA-fjxv-7rqg-78g4 | |
| CVE-2026-2391 | |
| GHSA-8qq5-rm4j-mr97 | |
| GHSA-mh29-5h37-fv8m | |
| GHSA-r6q2-hw4h-h46w | |
| Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') | |
| GHSA-cpq7-6gpm-g9rc | |
| GHSA-8mvj-3j78-4qmw | |
| GHSA-pqxr-3g65-p328 | |
| Improper Input Validation | |
| CVE-2025-9287 | |
| Arbitrary Code Injection | |
| GHSA-vm32-vv63-w422 | |
| CVE-2025-57352 | |
| GHSA-554w-wpv2-vw27 | |
| GHSA-43fc-jf86-j433 | |
| Improper Encoding or Escaping of Output | |
| CVE-2025-9288 | |
| GHSA-95m3-7q98-8xr5 | |
| GHSA-rx8g-88g5-qh64 | |
| Uncontrolled Recursion | |
| GHSA-5rq4-664w-9x2c | |
| Improper Handling of Unicode Encoding | |
