CVE/Issue	Vulnerability	Project	Severity	CVSS
FIX	XSS	python-markdown2	-	-
CVE-2024-48962	Unauthenticated RCE via SSTI (Freemarker sandbox bypass)	Apache OFBiz	High	8.8
CVE-2025-53628	HTTP Header Smuggling via insecure trailers merge	cpp-httplib	Moderate	6.3
PR	HTTP Header Smuggling	fasthttp	-	-
CVE-2025-55702	HTTP Request Smuggling	Apache Traffic Server	-	-
CVE-2025-57804	HTTP/2 Request Splitting	python h2	Moderate	6.9
CVE-2025-58068	HTTP Request Smuggling via improper handling of trailer section	eventlet	Moderate	6.3
CVE-2025-12642	HTTP Header Smuggling	lighttpd	Medium	6.9
FIX	DoS via HTTP/2 CONTINUATION Flood	async-http	-	-
CVE-2025-59822	HTTP Request Smuggling via improper handling of trailer section	http4s	Moderate	6.3
CVE-2025-67488	RCE via ZIP Slip	siyuan	High	8.6
CVE-2026-27804	Account Takeover via JWT algorithm confusion in Google auth adapter	parse-server	Critical	9.1
CVE-2026-27971	Unauthenticated RCE via server$ Deserialization	qwik	Critical	9.2
-	vendor or reporter disallowed the disclosure	Critical	10.0
CVE-2026-34752	DoS via __proto__ email header	Haraka	High	8.7