ooh and here's Apache Traffic Server with a hat trick

https://www.cve.org/CVERecord?id=CVE-2026-111815
https://www.cve.org/CVERecord?id=CVE-2026-111814
https://www.cve.org/CVERecord?id=CVE-2026-111812