CWE-183.

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

• CWE-20
• CWE-183

<0.32.0 · fixed in 0.32.0

nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

• Vorota-ai nmap-mcp
• CWE-183

iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

• iFlytek astron-agent
• CWE-183
• CWE-184

pypdf: Unvalidated JPEG image data loading

• CWE-20
• CWE-183

<6.21.1 · fixed in 6.21.1

Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability

• CWE-183

>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

Cross Site Scripting (XSS) vulnerability in SAPUI5

• SAP_SE SAPUI5
• CWE-183

Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

• Code injection
• CWE-183

<1.15.4 · fixed in 1.15.4

rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist

• rhukster dom-sanitizer
• CWE-183
• CWE-184

Security Policy Bypass in Forcepoint Security Engine (NGFW)

• Forcepoint Security Engine (NGFW)
• CWE-183
• CWE-1284

HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist

• HKUDS nanobot
• CWE-183
• CWE-184

NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

• NationalSecurityAgency skills-service
• Cross-site scripting (XSS)
• CWE-20

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

• Command injection
• CWE-183

<0.6.0 · fixed in 0.6.0

OpenVPN: The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through…

• OpenVPN
• CWE-183

Duplicate Advisory: Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

• CWE-183

>=1.0.0 · no fixed version yet

MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft

• dromara MaxKey
• CWE-183

Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding

• jan
• CWE-183
• CWE-942

Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

• Server-side request forgery (SSRF)
• CWE-183

>=0.31.0, <0.33.0 || >=1.15.0, <1.18.0 · fixed in 0.33.0, 1.18.0

princezuda SafestClaw Built-in Web shell.py ShellAction._validate_command incomplete blacklist

• princezuda SafestClaw
• CWE-183
• CWE-184

nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist

• nextlevelbuilder GoClaw
• CWE-183
• CWE-184

PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload

• PasswordPusher
• CWE-183

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

• CWE-183

<1.0.4 · fixed in 1.0.4

Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route

• appsmith
• Server-side request forgery (SSRF)
• CWE-183

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

• CWE-183
• CWE-942

<4.5.5 · fixed in 4.5.5

ASUS Armoury Crate: A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to…

• ASUS Armoury Crate
• CWE-183

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching

• CWE-183

<6.27.0 || >=7.0.0, <7.28.0 || >=8.0.0, <8.5.0 · fixed in 6.27.0, 7.28.0, 8.5.0

Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass

• CWE-183

<1.0.4 · fixed in 1.0.4

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

• Information disclosure
• CWE-183

>=0.2.54, <2.1.163 · fixed in 2.1.163

Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching

• CWE-20
• CWE-183

<0.9.21 · fixed in 0.9.21

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

• Server-side request forgery (SSRF)
• CWE-183

<26.0.0 · fixed in 26.0.0

gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

• Command injection
• CWE-183

>=0.31.0, <0.83.0 · fixed in 0.83.0

Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion

• Information disclosure
• CWE-183

<0.31.1 || >=1.0.0, <1.15.1 · fixed in 0.31.1, 1.15.1

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

• Server-side request forgery (SSRF)
• CWE-183

<0.31.1 || >=1.0.0, <1.15.1 · fixed in 0.31.1, 1.15.1

NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin

• netbox
• CWE-183

Netfoil has incorrect allowlist enforcement

• CWE-183
• CWE-193

<0.2.1 · fixed in 0.2.1

DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)

• Cross-site scripting (XSS)
• CWE-183

<3.4.0 · fixed in 3.4.0

OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths

• Path traversal
• CWE-183

<2026.4.15 · fixed in 2026.4.15

OpenClaw: Empty approver lists could grant explicit approval authorization

• Broken access control
• CWE-183

<2026.4.12 · fixed in 2026.4.12

DataEase has an Arbitrary File Read Vulnerability

• dataease
• CWE-183

JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root

• Juniper Networks JSI LWC
• CWE-183

DOMPurify ADD_ATTR predicate skips URI validation

• Cross-site scripting (XSS)
• CWE-183

<3.3.2 · fixed in 3.3.2

OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides

• CWE-183

<2026.3.22 · fixed in 2026.3.22

Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk)

• Cross-site scripting (XSS)
• CWE-183

<2.0.2 · fixed in 2.0.2

OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation

• Broken access control
• CWE-183

<2026.3.22 · fixed in 2026.3.22

Astro: Remote allowlist bypass via unanchored matchPathname wildcard

• CWE-20
• CWE-183

>=2.10.10, <5.18.1 · fixed in 5.18.1

PbootCMS File Upload file.php incomplete blacklist

• PbootCMS
• CWE-183
• CWE-184

Permissive List of Allowed Inputs in ewe

• CWE-183

>=0.6.0, <3.0.5 · fixed in 3.0.5

mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling

• CWE-183

<1.17.7 · fixed in 1.17.7

Unsafe Reflection in Mongoid::Criteria.from_hash

• MongoDB Inc MongoDB Ruby Driver
• CWE-183

n8n: Webhook Node IP Whitelist Bypass via Partial String Matching

• Memory corruption
• Broken access control

>=1.36.0, <2.2.0 · fixed in 2.2.0

JetBrains TeamCity: In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential…

• JetBrains TeamCity
• CWE-183

Microsoft Purview Elevation of Privilege Vulnerability

• Microsoft Purview
• CWE-183

filebrowser Allows Shell Commands to Spawn Other Commands

• Command injection
• CWE-183

<2.33.10 · fixed in 2.33.10

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network int…

• Bosch Rexroth AG ctrlX OS - Device Admin
• CWE-183

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).

• Siemens SINEC Security Monitor
• CWE-183

CSP bypass in Hush Line

• scidsg hushline
• CWE-183

Iperf3: possible denial of service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-183

Unauthorized write operations in PaperCut NG/MF

• PaperCut NG, PaperCut MF
• CWE-183

Grafana is an open-source platform for monitoring and observability.

• Grafana Enterprise
• CWE-183

A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the…

• Fortinet FortiOS
• CWE-183

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability.

• Dell PowerPath Management Appliance
• CWE-183