CWE-184: Incomplete List of Disallowed Inputs
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.
Also known as Denylist / Deny List, Blocklist / Block List, Blacklist / Black List.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- thexerteproject xerteonlinetoolkitsXerte Online Toolkits File Upload RCE via elfinder Connector9.3 Critical
- flowiseai flowiseFlowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability9.2 Critical
- octobercms octoberOctober: Safe Mode Bypass via Twig Database Write Operations6.6 Medium
- octobercms octoberOctober: Safe Mode Bypass via CSS Preprocessor Compilers4.9 Medium
- openmage magento, magento-lts +1 moreOpenMage LTS has Path Traversal Filter Bypass in Dataflow Module4.9 Medium
- flowiseai flowiseFlowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability9.2 Critical
- openclawOpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image4.9 Medium
- openclawOpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy8.7 High
- openclawOpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection8.7 High
- openclawOpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade9.1 Critical
- openclawOpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events9.1 Critical
- parzivalhack pyspectorPySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code6.9 Medium
- kimaiKimai before 2.53.0 API Token Leakage via Invoice Template2.0 Low
- openclawOpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environment5.8 Medium
- beszelBeszel has an IDOR in hub API endpoints that read system ID from URL parameter3.5 Low
- unjs unheadUnhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()6.1 Medium
- openclawOpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injection5.8 Medium
- canonical lxdVM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf9.1 Critical
- openclawOpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File Options5.4 Medium
- directusDirectus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow6.1 Medium
- openclawOpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution7.1 High
- openclawOpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling5.8 Medium
- openclawOpenClaw - Shell-Bleed Protection Preflight Validation Bypass5.3 Medium
- dgtlmoon changedetection.io, webtechnologies changedetection +1 moreChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read7.1 High
- bytedance inc. deerflowByteDance DeerFlow LocalSandboxProvider Host Bash Escape8.6 High
- openclawOpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges5.1 Medium
- openclawOpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist5.8 Medium
- openclawOpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders6.9 Medium
- openclawOpenClaw - Approval Bypass via Environment Variable Normalization6.9 Medium
- hackerbay oneuptimeOneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe10.0 Critical
- invoiceninja invoice ninja, invoiceninja +1 moreInvoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items5.4 Medium
- No product listedPbootCMS File Upload file.php incomplete blacklist5.3 Medium
- parzivalhack pyspectorPySpector: Plugin Sandbox Bypass leads to Arbitrary Code Execution8.3 High
- b3log siyuanSiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)9.3 Critical
- b3log siyuanSiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secrets6.8 Medium
ficklingPyPIfickling's `platform` module subprocess invocation evades `check_safety()` with `LIKELY_SAFE`6.9 MediumficklingPyPIfickling modules linecache, difflib and gc are missing from the unsafe modules blocklist6.9 Medium- fastgptFastGPT Python Sandbox Bypass of File-Write Restriction6.3 Medium
- openclawOpenClaw < 2026.3.7 - Custom Authorization Header Leakage via Cross-Origin Redirects8.8 High
openclawnpmOpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers5.0 MediumsagemakerPyPISageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality8.4 HighficklingPyPIFickling missing RCE-capable modules in UNSAFE_IMPORTS8.9 High- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter5.8 Medium
- openclawOpenClaw < 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec Allowlist6.0 Medium
- openclawOpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix Fallback5.8 Medium
- craftcms cms, craft cms +1 moreCraft has a Twig Function Blocklist Bypass9.4 Critical
- mmaitre314 picklescanpicklescan - Remote Code Execution via Unblocked Standard Library Modules9.3 Critical
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass9.3 Critical
- openclawOpenClaw < 2026.2.21 - Arbitrary File Read via grep -e Flag Policy Bypass6.0 Medium
- openclawOpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S7.1 High
- Show moreLoading…