Leaking internal headers in Flask Ninja with deserialization

CVE-2026-57585 MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error

CVE-2026-8723 qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly

CVE-2026-34481 Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout