diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json
index ec500604d..b8aec85a7 100644
--- a/UNDF-REGISTRY.json
+++ b/UNDF-REGISTRY.json
@@ -566,5 +566,13 @@
   "dry-0001": "UNDF-2026-000000314",
   "dry-0002": "UNDF-2026-000000316",
   "spring-0002": "UNDF-2026-000000317",
-  "tinkerpop-0001": "UNDF-2026-000000014"
+  "tinkerpop-0001": "UNDF-2026-000000014",
+  "druid-0001": "UNDF-2026-000000107",
+  "graphhopper-0001": "UNDF-2026-000000108",
+  "graphhopper-0002": "UNDF-2026-000000109",
+  "janusgraph-0001": "UNDF-2026-000000110",
+  "kylin-0001": "UNDF-2026-000000111",
+  "kylin-0002": "UNDF-2026-000000318",
+  "pinot-0001": "UNDF-2026-000000330",
+  "victoria-metrics-0001": "UNDF-2026-000000334"
 }
diff --git a/defects/doris/patch/doris-0001-equivalence-class-list-contains-hashset.md b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md
similarity index 97%
rename from defects/doris/patch/doris-0001-equivalence-class-list-contains-hashset.md
rename to defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md
index 1b729f679..cd55ff323 100644
--- a/defects/doris/patch/doris-0001-equivalence-class-list-contains-hashset.md
+++ b/defects/doris/patch/doris-0003-equivalence-class-list-contains-hashset.md
@@ -1,12 +1,12 @@
 # UNDF: UNDF-2026-000000381
 # UNDF: (pending)
-# doris-0001: EquivalenceClass.getEquivalenceSetList — O(N²) List.contains dedup
+# doris-0003: EquivalenceClass.getEquivalenceSetList — O(N²) List.contains dedup
 
 ## CWE-407 — Algorithmic Complexity
 
 | Field | Value |
 |-------|-------|
-| ID | doris-0001 |
+| ID | doris-0003 |
 | Severity | MEDIUM |
 | Ecosystem | doris |
 | Package | fe-core |
diff --git a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md
index 767c99508..cc9469dc3 100644
--- a/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md
+++ b/defects/druid/patch/druid-0001-scan-query-columns-list-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000383
+# UNDF: UNDF-2026-000000107
 # druid-0001: ScanQuery columns List.contains in orderBy validation loop
 
 ## Severity
diff --git a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md
index 25d0f595b..4dcea2d67 100644
--- a/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md
+++ b/defects/graphhopper/patch/graphhopper-0001-alternative-route-ch-nodes-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000407
+# UNDF: UNDF-2026-000000108
 # graphhopper-0001: AlternativeRouteCH — IntArrayList.contains() O(P) inside edge loop
 
 ## File
diff --git a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md
index 81eb4d2ff..63a4e7bcc 100644
--- a/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md
+++ b/defects/graphhopper/patch/graphhopper-0002-alternative-route-edge-ch-nodes-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000408
+# UNDF: UNDF-2026-000000109
 # graphhopper-0002: AlternativeRouteEdgeCH — IntArrayList.contains() O(P) inside edge loop
 
 ## File
diff --git a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md
index 9c5713993..617abb3cc 100644
--- a/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md
+++ b/defects/janusgraph/patch/janusgraph-0001-multicondition-arraylist-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000430
+# UNDF: UNDF-2026-000000110
 # janusgraph-0001: MultiCondition extends ArrayList — O(C²) condition deduplication in query builder
 
 ## Severity
diff --git a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md
index 640e43e61..2e8b92a4b 100644
--- a/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md
+++ b/defects/kylin/patch/kylin-0001-job-scheduler-jobinfoids-hashset.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000447
+# UNDF: UNDF-2026-000000111
 # kylin-0001: JdbcJobScheduler — List<String>.contains in stream filter → O(J²)
 
 ## Classification
diff --git a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md
index 851492086..8ff93d874 100644
--- a/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md
+++ b/defects/kylin/patch/kylin-0001-ndataflow-layout-update-quadratic-list-scan.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000447
+# UNDF: UNDF-2026-000000111
 # kylin-0001: NDataflowManager.updateDataflowDetailsLayouts — O(L²) ArrayList.contains in layout update loop
 
 ## CWE-407 — Algorithmic Complexity
diff --git a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md
index 954acdab0..3100c7e52 100644
--- a/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md
+++ b/defects/kylin/patch/kylin-0002-acl-permission-util-authority-dedup-quadratic.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000014
+# UNDF: UNDF-2026-000000318
 # kylin-0002: AclPermissionUtil.transformAuthorities — O(A²) ArrayList dedup loop
 
 ## CWE-407 — Algorithmic Complexity
diff --git a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md
index 5726b17ee..3bb33e3c4 100644
--- a/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md
+++ b/defects/pinot/patch/pinot-0001-segment-processor-utils-sort-order-list-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000500
+# UNDF: UNDF-2026-000000330
 # pinot-0001: SegmentProcessorUtils sortOrder List.contains per field in schema loop
 
 ## Severity
diff --git a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch
index 963ae5b14..93ace7b4f 100644
--- a/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch
+++ b/defects/tinkerpop/patch/tinkerpop-0001-path-issimple-hashset.patch
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000314
+# UNDF: UNDF-2026-000000014
 --- a/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java
 +++ b/gremlin-core/src/main/java/org/apache/tinkerpop/gremlin/process/traversal/Path.java
 @@ -203,13 +203,11 @@ public interface Path extends Cloneable, Iterable<Object> {
diff --git a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md
index 17fc67d26..a9bab812d 100644
--- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md
+++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000330
+# UNDF: UNDF-2026-000000334
 # victoria-metrics-0001 — `streamaggr`: O(L×K) `slices.Contains` inside `Push()` hot loop
 
 ## Status
diff --git a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch
index 1987cfaf9..beec4f4ab 100644
--- a/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch
+++ b/defects/victoria-metrics/patch/victoria-metrics-0001-streamaggr-label-filter-map.patch
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000330
+# UNDF: UNDF-2026-000000334
 diff --git a/lib/streamaggr/streamaggr.go b/lib/streamaggr/streamaggr.go
 --- a/lib/streamaggr/streamaggr.go
 +++ b/lib/streamaggr/streamaggr.go