CWE-184: Incomplete List of Disallowed Inputs
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.
Also known as Denylist / Deny List, Blocklist / Block List, Blacklist / Black List.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +4 more +6 moreAwx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups9.1 Critical
- apereo foundation openequellaopenEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker8.7 High
- mcp-atlassian mcp atlassian, sooperset mcp-atlassian +1 moreMCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)8.3 High
- chartbrewChartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool6.5 Medium
- arcadedata arcadedbArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle7.1 High
- nuxt-content mdc@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration8.1 High
- ibm contextforge, contextforge mcp gateway +1 moreIBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures5.4 Medium
- hkuds nanobotHKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist5.3 Medium
- mistralai mistral-vibeAn arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command...10.0 Critical
- aws labs postgres mcp serverRead-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server9.0 Critical
- aws labs mysql mcp serverIncomplete list of disallowed inputs in awslabs mysql-mcp-server5.7 Medium
- pmmp pocketmine-mpPocketMine-MP before 5.43.1 Denial of Service via unauthenticated login8.7 High
- google cloud agent development kit (adk) for pythonRemote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist10.0 Critical
- roocodeinc roo-codeRoo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator7.7 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreActive Directory Certificate Services (AD CS) Tampering Vulnerability6.5 Medium
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability7.8 High
- ami aptiovBDS Module Bypass Secure Boot Advisory8.7 High
- amazon postgres-mcp-serverAn incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server7.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Script Execution Disable Setting Not Enforced7.5 High
- svg svgoSVGO: removeScripts allows executable links through namespace and control-character bypasses8.2 High
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +2 more +4 moreOrg.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)8.1 High
- hclsoftware travelerAn input reflection vulnerability affects HCL Traveler3.5 Low
- nvidia openshellNVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an...9.9 Critical
- continuedev continueContinue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode8.3 High
- omnigent-ai omnigentOmnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py7.1 High
- unknown limit login attempts securityLimit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email3.7 Low
- decolua 9router9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable6.3 Medium
- dicebearDiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)4.7 Medium
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Plugin Import Guard Bypass9.3 Critical
- flowiseai flowiseFlowise before 3.1.3 Sandbox Escape via Pandas Methods8.6 High
- oscal-compass compliance-trestleTrestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.08.6 High
- fortinet fortiwebA incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2,...4.8 Medium
- vimVim: Arbitrary Code Execution via Netrw Menu Construction8.6 High
- craftcms cmsCraft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObject8.7 High
- ibm langflow oss, langflow +1 moreLangflow is affected by security vulnerabilities in Model Context Protocol features7.2 High
- esphomeESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution8.6 High
- flowiseai flowiseFlowise: Pyodide validator Unicode homoglyph bypass leads to RCE9.5 Critical
- flowiseai flowiseFlowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)8.7 High
- @fastify/forwarded, fastify fastify\/forwarded +1 more@fastify/forwarded vulnerable to improper input validation via unstripped tab characters in X-Forwarded-For5.3 Medium
- gitpython-developers gitpythonGitPython before 3.1.54 Remote Code Execution via --template7.7 High
- nlnet labs unboundAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush5.3 Medium
- flavorjones loofahLoofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons2.3 Low
- gitpython-developers gitpythonGitPython before 3.1.51 Command Injection via option prefix abbreviation8.7 High
- svg svgoSVGO: removeScripts plugin leaves some executable scripts intact8.2 High
- flavorjones loofahLoofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references2.3 Low
- roocodeinc roo-codeRoo Code 3.54.0 Command Injection via Parameter Expansion Parsing7.7 High
- princezuda safestclawprincezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklist4.8 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints8.1 High
- openclawOpenClaw < 2026.6.6 Environment Variable Injection via rustup7.7 High
- nocobaseNocoBase: Sensitive Data Exposure via SQL Blacklist Bypass6.8 Medium
- Show moreLoading…