Hiawatha Hiawatha Web server

• CVE-2025-57784 Medium 4.0 Tomahawk authentication timing attack due to usage of 'strcmp' 0.2%
• CVE-2025-57785 Medium 6.5 Double free in XSLT in 'show_index' 0.4%
• CVE-2025-57783 Medium 5.3 Improper header parsing may lead to request smuggling 0.5%