# CWE-184.

Every Advisory and CVE whose sources give the weakness CWE-184, newest first.

## Records, newest first

- [AG2: Newline injection in SandboxShellTool bypasses allowed=\[...\] and readonly=True, enabling arbitrary command execution](https://agentprime.io/advisories/CVE-2026-113663.md)
  `CVE-2026-113663` · CVE record: ag2ai ag2 and 1 more · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection, CWE-184
- [Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass](https://agentprime.io/advisories/CVE-2026-121949.md)
  `CVE-2026-121949` · CVE record: sensiolabs symfony · CVSS 2.3 Low · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-184, CWE-1023
- [Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass](https://agentprime.io/advisories/CVE-2026-123125.md)
  `CVE-2026-123125` · CVE record: sensiolabs symfony · CVSS 6.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [CVE-2026-118517: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority: Incomplete Fix for CVE-2026-45066](https://agentprime.io/advisories/PKSA-n87g-t5cn-m1yq.md)
  `PKSA-n87g-t5cn-m1yq`, `CVE-2026-118517` · Packagist `symfony/html-sanitizer`: affected `>=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.50 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.23 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.11`, fixed in `6.2.0`, `6.3.0`, `6.4.0`, `6.4.50`, `7.1.0`, `7.2.0`, `7.3.0`, `7.4.0`, `7.4.23`, `8.1.0`, `8.1.11` · CVSS 2.3 Low · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-184, CWE-436
- [CVE-2026-118517: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority: Incomplete Fix for CVE-2026-45066](https://agentprime.io/advisories/PKSA-66zq-5hky-mbzt.md)
  `PKSA-66zq-5hky-mbzt`, `CVE-2026-118517` · Packagist `symfony/symfony`: affected `>=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.50 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.23 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.11`, fixed in `6.2.0`, `6.3.0`, `6.4.0`, `6.4.50`, `7.1.0`, `7.2.0`, `7.3.0`, `7.4.0`, `7.4.23`, `8.1.0`, `8.1.11` · CVSS 2.3 Low · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-184, CWE-436
- [vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases](https://agentprime.io/advisories/CVE-2026-119567.md)
  `CVE-2026-119567` · CVE record: vsftpd vsftpd · CVSS 2.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-184
- [PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox](https://agentprime.io/advisories/GHSA-26mh-57q7-jfvr.md)
  `GHSA-26mh-57q7-jfvr`, `CVE-2026-61438` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 7.0 High · Not analysed yet · Published 29 Oct 2026 · Tags: Command injection, CWE-184, CWE-693
- [Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-96196.md)
  `CVE-2026-96196` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-184
- [Hydra legacy target blacklist permits unsafe PyYAML loading](https://agentprime.io/advisories/GHSA-wf6j-7hvr-gr93.md)
  `GHSA-wf6j-7hvr-gr93` · PyPI `hydra-core`: affected `>=1.3.6, <1.3.8 || >=1.4.0.dev9, <1.4.0rc3`, fixed in `1.3.8`, `1.4.0rc3` · CVSS 7.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-184
- [Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys](https://agentprime.io/advisories/GHSA-7vr2-2fgp-9w7p.md)
  `GHSA-7vr2-2fgp-9w7p`, `CVE-2026-114615`, `PYSEC-2026-4355` · PyPI `authlib`: affected `>=1.3.1, <1.9.0`, fixed in `1.9.0` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS, CWE-184
- [JetBrains Junie CLI: In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete…](https://agentprime.io/advisories/CVE-2026-117530.md)
  `CVE-2026-117530` · CVE record: JetBrains Junie CLI · CVSS 6.7 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-184
- [iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist](https://agentprime.io/advisories/CVE-2026-116339.md)
  `CVE-2026-116339` · CVE record: iFlytek astron-agent · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-183, CWE-184
- [Incomplete validation in the run_script Python sandbox in AWS MCP Server](https://agentprime.io/advisories/CVE-2026-115845.md)
  `CVE-2026-115845` · CVE record: AWS AWS MCP Server · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-184
- [mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname](https://agentprime.io/advisories/CVE-2026-115751.md)
  `CVE-2026-115751` · CVE record: agentfront mcp-from-openapi · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-184
- [Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content…](https://agentprime.io/advisories/CVE-2026-114729.md)
  `CVE-2026-114729` · CVE record: Roundcube Webmail · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-184
- [Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content…](https://agentprime.io/advisories/CVE-2026-114728.md)
  `CVE-2026-114728` · CVE record: Roundcube Webmail · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-184
- [Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database](https://agentprime.io/advisories/CVE-2026-113605.md)
  `CVE-2026-113605` · CVE record: Stirling-Tools Stirling-PDF · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-184
- [Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE](https://agentprime.io/advisories/CVE-2026-112777.md)
  `CVE-2026-112777` · CVE record: craftcms cms · CVSS 8.7 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-184
- [Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)](https://agentprime.io/advisories/GHSA-cf23-7qxj-xmhr.md)
  `GHSA-cf23-7qxj-xmhr`, `CVE-2026-84316`, `GO-2026-6782` · Go `github.com/0xJacky/Nginx-UI`: affected `<1.9.10-0.20260703131214-23d1934099b0`, fixed in `1.9.10-0.20260703131214-23d1934099b0` · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-20, CWE-184
- [Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection](https://agentprime.io/advisories/CVE-2026-77466.md)
  `CVE-2026-77466` · CVE record: LycheeOrg Lychee · CVSS 8.3 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-20, CWE-184
- [Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation](https://agentprime.io/advisories/CVE-2026-104024.md)
  `CVE-2026-104024` · CVE record: PeaZip PeaZip · CVSS 4.6 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-184, CWE-693
- [Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes](https://agentprime.io/advisories/CVE-2026-102087.md)
  `CVE-2026-102087` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-184
- [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108471.md)
  `CVE-2026-108471` · CVE record: Microsoft Windows 10 Version 1809 and 2 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-184
- [Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution](https://agentprime.io/advisories/CVE-2026-110205.md)
  `CVE-2026-110205` · CVE record: RooCodeInc Roo-Code · CVSS 7.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-184
- [GNU Emacs: GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a…](https://agentprime.io/advisories/CVE-2026-108976.md)
  `CVE-2026-108976` · CVE record: GNU Emacs · CVSS 7.8 High · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-184
- [OS command injection in Amazon Agent Plugins for AWS databases-on-aws](https://agentprime.io/advisories/CVE-2026-107322.md)
  `CVE-2026-107322` · CVE record: aws databases-on-aws · CVSS 8.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-184
- [Handlebars: JavaScript Injection via Own Property Check Bypass](https://agentprime.io/advisories/GHSA-p8wg-vrv2-v86f.md)
  `GHSA-p8wg-vrv2-v86f`, `CVE-2026-106445` · npm `handlebars`: affected `>=3.0.0, <4.7.10`, fixed in `4.7.10` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-184, CWE-1289
- [Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses](https://agentprime.io/advisories/GHSA-r7f2-6fj8-6fg2.md)
  `GHSA-r7f2-6fj8-6fg2`, `BIT-ghost-2026-105648`, `CVE-2026-105648` · npm `ghost`: affected `>=6.0.9, <6.65.0`, fixed in `6.65.0` · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Ghost: Stored XSS via oEmbed Photo Responses](https://agentprime.io/advisories/GHSA-v3xr-g6p2-fvgv.md)
  `GHSA-v3xr-g6p2-fvgv`, `BIT-ghost-2026-104414`, `BIT-ghost-2026-105650`, `CVE-2026-104414`, `CVE-2026-105650` · npm `ghost`: affected `>=2.5.0, <6.64.0`, fixed in `6.64.0` · CVSS 8.6 High · Not analysed yet · Published 7 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Hydra instantiate target blacklist bypasses permit code execution](https://agentprime.io/advisories/GHSA-rqx7-p7vv-w7hr.md)
  `GHSA-rqx7-p7vv-w7hr`, `CVE-2026-106442`, `PYSEC-2026-4223` · PyPI `hydra-core`: affected `>=1.3.4, <1.3.6 || >=1.4.0.dev0, <1.4.0.dev9`, fixed in `1.3.6`, `1.4.0.dev9` · CVSS 7.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-184
- [Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization](https://agentprime.io/advisories/CVE-2026-106556.md)
  `CVE-2026-106556` · CVE record: backstage backstage and 1 more · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Command injection, CWE-184
- [JetBrains TeamCity: In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE…](https://agentprime.io/advisories/CVE-2026-106218.md)
  `CVE-2026-106218` · CVE record: JetBrains TeamCity · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-184
- [Microsoft UFO: Arbitrary code execution in \`run_shell\` via \`explorer.exe\` argument injection](https://agentprime.io/advisories/CVE-2026-105791.md)
  `CVE-2026-105791` · CVE record: microsoft UFO · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, CWE-184
- [Microsoft UFO: Arbitrary file write in the Linux MCP \`execute_command\` tool](https://agentprime.io/advisories/CVE-2026-105789.md)
  `CVE-2026-105789` · CVE record: microsoft UFO · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, CWE-184
- [simple-git: \`VISUAL\` editor environment variable is omitted from unsafe editor detection](https://agentprime.io/advisories/GHSA-v5rq-49vh-5v5c.md)
  `GHSA-v5rq-49vh-5v5c`, `CVE-2026-102829` · npm `@simple-git/argv-parser`: affected `<2.0.1`, fixed in `2.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection, CWE-184
- [simple-git unsafe-operation guard does not block trailer command configuration](https://agentprime.io/advisories/GHSA-x6jw-m9v5-85vh.md)
  `GHSA-x6jw-m9v5-85vh`, `CVE-2026-102828` · npm `simple-git`: affected `>=3.15.0, <4.0.1`, fixed in `4.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection, CWE-184
- [rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist](https://agentprime.io/advisories/CVE-2026-103687.md)
  `CVE-2026-103687` · CVE record: rhukster dom-sanitizer · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-183, CWE-184
- [OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override](https://agentprime.io/advisories/CVE-2026-101884.md)
  `CVE-2026-101884` · CVE record: OpenClaw OpenClaw Windows Node · CVSS 7.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-184
- [OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set](https://agentprime.io/advisories/CVE-2026-101882.md)
  `CVE-2026-101882` · CVE record: OpenClaw OpenClaw Windows Node · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-184
- [JetBrains TeamCity: In JetBrains TeamCity before 2026.2, 2026.1.4…](https://agentprime.io/advisories/CVE-2026-100253.md)
  `CVE-2026-100253` · CVE record: JetBrains TeamCity · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-184
- [SSRF via DNS-resolution gap in \_validate_url_security (file download by URL)](https://agentprime.io/advisories/CVE-2026-55096.md)
  `CVE-2026-55096` · CVE record: leshchenko1979 fast-mcp-telegram · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Zammad: Remote image tracking bypass via shortened URL scheme](https://agentprime.io/advisories/CVE-2026-63206.md)
  `CVE-2026-63206` · CVE record: zammad zammad · CVSS 5.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-20, CWE-184
- [@bytebase/dbhub's read-only mode does not prevent database writes](https://agentprime.io/advisories/GHSA-mwwr-p57h-56pf.md)
  `GHSA-mwwr-p57h-56pf`, `CVE-2026-61788` · npm `@bytebase/dbhub`: affected `<0.22.6`, fixed in `0.22.6` · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2026 · Tags: Broken access control, CWE-184, CWE-636
- [OpenStack Swift: In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From…](https://agentprime.io/advisories/CVE-2026-97149.md)
  `CVE-2026-97149` · CVE record: OpenStack Swift · CVSS 5.3 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-184
- [Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-co…](https://agentprime.io/advisories/CVE-2026-84714.md)
  `CVE-2026-84714` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-184
- [Automation-controller: automation-controller-container: automation-controller: credential type env-injector deny-list omits process-hijacking variables (bash_env/ld_preload) allowing code execution i…](https://agentprime.io/advisories/CVE-2026-84706.md)
  `CVE-2026-84706` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 7.6 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-184
- [Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups](https://agentprime.io/advisories/CVE-2026-75884.md)
  `CVE-2026-75884` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-184
- [MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)](https://agentprime.io/advisories/GHSA-w66g-j6c4-hcfc.md)
  `GHSA-w66g-j6c4-hcfc`, `CVE-2026-77251`, `PYSEC-2026-4102` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Broken access control, CWE-184, CWE-693, CWE-1276
- [openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker](https://agentprime.io/advisories/CVE-2026-67615.md)
  `CVE-2026-67615` · CVE record: Apereo Foundation openEQUELLA · CVSS 8.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Insecure deserialization, CWE-184
- [Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool](https://agentprime.io/advisories/CVE-2026-61851.md)
  `CVE-2026-61851` · CVE record: chartbrew chartbrew · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-184
- [ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle](https://agentprime.io/advisories/CVE-2026-93598.md)
  `CVE-2026-93598` · CVE record: ArcadeData arcadedb · CVSS 7.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-184
- [@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration](https://agentprime.io/advisories/GHSA-mxm6-v9r6-r94c.md)
  `GHSA-mxm6-v9r6-r94c`, `CVE-2026-63671` · npm `@nuxtjs/mdc`: affected `<0.22.1`, fixed in `0.22.1` · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Grav: XSS Blueprint Validation Bypass via Twig String Concatenation](https://agentprime.io/advisories/GHSA-2c4f-86xc-cr74.md)
  `GHSA-2c4f-86xc-cr74`, `CVE-2026-61453`, `PKSA-y2jw-px84-6zx6` · Packagist `getgrav/grav`: affected `>=2.0.0, <2.0.1`, fixed in `2.0.1` · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-184
- [IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures](https://agentprime.io/advisories/CVE-2026-11918.md)
  `CVE-2026-11918` · CVE record: IBM ContextForge MCP Gateway · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-184
- [HKUDS nanobot ExecTool shell.py ExecTool.\_spawn incomplete blacklist](https://agentprime.io/advisories/CVE-2026-90808.md)
  `CVE-2026-90808` · CVE record: HKUDS nanobot · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-183, CWE-184
- [An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments.](https://agentprime.io/advisories/CVE-2026-87985.md)
  `CVE-2026-87985` · CVE record: mistralai mistral-vibe · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-184
- [Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server](https://agentprime.io/advisories/CVE-2026-87911.md)
  `CVE-2026-87911` · CVE record: AWS AWS Labs postgres MCP Server · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Command injection, CWE-184
- [Incomplete list of disallowed inputs in awslabs mysql-mcp-server](https://agentprime.io/advisories/CVE-2026-85788.md)
  `CVE-2026-85788` · CVE record: AWS AWS Labs MySQL MCP Server · CVSS 5.7 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-184
- [PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login](https://agentprime.io/advisories/CVE-2026-86199.md)
  `CVE-2026-86199` · CVE record: pmmp PocketMine-MP · CVSS 8.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-184
- [Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist](https://agentprime.io/advisories/CVE-2026-79696.md)
  `CVE-2026-79696` · CVE record: Google Cloud Agent Development Kit (ADK) for Python · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-184

Older: <https://agentprime.io/advisories/tag/cwe-184.md?cursor=WyIyMDI2LTA5LTA5VDA4OjE2OjUwLjUxMTAwMFoiLCJDVkUtMjAyNi03OTY5NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-184>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-184/>. Everything for agents: <https://agentprime.io/llms.txt>.