CWE-184: Incomplete List of Disallowed Inputs
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.
Also known as Denylist / Deny List, Blocklist / Block List, Blacklist / Black List.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- getgrav gravGrav before 2.0.1 XSS via Twig String Concatenation5.1 Medium
- mervinpraison praisonaiPraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox7.0 High
- nextlevelbuilder goclawnextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist5.3 Medium
- openclawOpenClaw < 2026.6.6 Authentication Bypass via Git ext transport8.7 High
- openclawOpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering8.7 High
- zopefoundation restrictedpythonRestrictedPython guard hooks can be shadowed via positional-only arguments8.3 High
- lepture mistuneMistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution6.1 Medium
- openclawOpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files8.4 High
- trailofbits ficklingFickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)8.8 High
- lxml, fedora-python lxml html clean +1 morelxml: javascript: URL bypass in Cleaner via xlink:href8.2 High
- kestra, kestra oss +1 moreKestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`10.0 Critical
- siyuan-note siyuanSiYuan: Stored XSS in Bazaar marketplace via package README event handlers7.1 High
- mastodonMastodon: SSRF protection bypass on older Ruby versions8.6 High
- tryghost ghostGhost: Private IP filtering bypass to make server-side requests to internal services5.8 Medium
- fasterxml jackson-databindjackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation8.1 High
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)8.1 High
- nokogiriNokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-262472.6 Low
- mervinpraison praisonaiPraisonAI codeMode sandbox escape via Function constructor9.9 Critical
- tinyhumansai openhumanOpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution9.4 Critical
- n8nn8n - AST Validator Bypass in Python Code Node5.3 Medium
- openclawOpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing7.6 High
- openclawOpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variables7.6 High
- openclawOpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS5.3 Medium
- openclawOpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks7.6 High
- openclawOpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers2.3 Low
bleachPyPIBleach: URI sanitization allows disallowed URI schemes with Unicode > U+00A0 in output0.0 None- sensiolabs symfony, actions http-client, symfony http-foundation +2 moreSymfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient6.9 Medium
- filebrowserFile Browser: Command Allowlist Bypass via Shell Metacharacter Injection8.7 High
- openclawOpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases8.7 High
- mervinpraison praisonai, < 1.6.40 +1 morePraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)9.9 Critical
- spatie laravel-medialibrarySpatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php8.7 High
- labring fastgptFastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassable6.3 Medium
- gotenbergGotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes7.5 High
- sensiolabs symfony, symfony html-sanitizer +1 moreSymfony: HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite — javascript: URI Survives Sanitization (XSS)2.1 Low
- zedZed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions8.6 High
- zedZed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions6.4 Medium
- sensiolabs symfony, symfony html-sanitizer +1 moreSymfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification2.3 Low
- carrierwave project carrierwaveCarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters4.7 Medium
- eugeny tabbyTabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation7.1 High
- flowise, flowise components +1 moreFlowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess8.7 High
- dragonmonk111 junoclawJunoClaw: plugin-shell shell-injection bypass via substring blocklist8.4 High
- gotenbergGotenberg: ExifTool group-prefix syntax bypasses dangerous-tag blocklist8.2 High
- givanz vvvebVvveb < 1.0.8.2 Authenticated RCE via Code Editor8.7 High
- felippe-regazio ssrfcheckssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs8.2 High
- openclawOpenClaw < 2026.4.23 - Unsafe Config Mutation via Gateway Tool Denylist Bypass7.7 High
- openclawOpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist8.7 High
- gotenbergGotenberg: ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names Allows Arbitrary File Rename and Move8.2 High
- openclawOpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv8.5 High
- openclawOpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actions2.3 Low
- xibosignage xibo, xibo-cms +1 moreXibo CMS API has SQL Injection via DataSet Filter Parameter7.6 High
- Show moreLoading…