CWE-184: Incomplete List of Disallowed Inputs
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.
Also known as Denylist / Deny List, Blocklist / Block List, Blacklist / Black List.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.9 Critical
- chartbrew Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier + pg_stat_file/pg_ls_* sibling gap) 4.6 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 more Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation 4.4 Medium
- skyvern Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode 8.7 High
- ag2ai ag2, autogen +1 more AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution 8.8 High
- sensiolabs symfony Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass 2.3 Low
- sensiolabs symfony Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass 6.3 Medium
- sensiolabs symfony Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066) 2.3 Low
- vsftpd vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases 2.3 Low
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability 8.8 High
-
hydra-corePyPI Hydra legacy target blacklist permits unsafe PyYAML loading 7.8 High - jetbrains junie cli In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation... 6.7 Medium
- iflytek astron-agent iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist 6.9 Medium
- aws mcp server Incomplete validation in the run_script Python sandbox in AWS MCP Server 5.3 Medium
- agentfront mcp-from-openapi mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname 6.3 Medium
- agentfront mcp-from-openapi mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects 6.3 Medium
- authlib Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys 7.4 High
- bulwarkmail webmail Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking... 5.3 Medium
- bulwarkmail webmail Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking... 5.3 Medium
- stirling-tools stirling-pdf Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database 8.6 High
- craftcms cms Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE 8.7 High
- lycheeorg lychee Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection 8.3 High
- peazip Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation 4.6 Medium
- juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes 7.1 High
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +1 more +3 more Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability 8.8 High
- roocode roo code, roocodeinc roo-code +1 more Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution 7.7 High
- 0xjacky nginx-ui Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image) 8.8 High
- gnu emacs GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename... 7.8 High
- aws databases-on-aws OS command injection in Amazon Agent Plugins for AWS databases-on-aws 8.5 High
- @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization 7.7 High
- handlebars-lang handlebars.js Handlebars: JavaScript Injection via Own Property Check Bypass 9.2 Critical
- hydra-ecosystem hydra Hydra instantiate target blacklist bypasses permit code execution 7.8 High
- jetbrains teamcity In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the... 8.8 High
- microsoft ufo Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injection 7.5 High
- microsoft ufo Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool 5.4 Medium
- tryghost ghost Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses 4.0 Medium
- tryghost ghost Ghost: Stored XSS via oEmbed Photo Responses 8.1 High
- tryghost ghost Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses 8.6 High
- rhukster dom-sanitizer rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist 6.9 Medium
- openclaw windows node OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override 7.7 High
- openclaw windows node OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set 8.7 High
- jetbrains teamcity In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code... 8.8 High
- steveukx git-js simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection 9.2 Critical
- simple-git project simple-git, steveukx git-js +1 more simple-git unsafe-operation guard does not block trailer command configuration 9.2 Critical
- leshchenko1979 fast-mcp-telegram SSRF via DNS-resolution gap in _validate_url_security (file download by URL) 7.1 High
- zammad Zammad: Remote image tracking bypass via shortened URL scheme 5.3 Medium
- bytebase dbhub @bytebase/dbhub's read-only mode does not prevent database writes 7.4 High
- openstack swift In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header... 5.3 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +2 more +4 more Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-cor… 7.1 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +2 more +4 more Automation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution in… 7.6 High
- Show olderLoading…