# CWE-184.

Every Advisory and CVE whose sources give the weakness CWE-184, newest first.

## Records, newest first (an older page)

- [OpenClaw: Shell init-file options could satisfy exec allowlist script matching](https://agentprime.io/advisories/GHSA-wpc6-37g7-8q4w.md)
  `GHSA-wpc6-37g7-8q4w`, `CVE-2026-41392` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 5.4 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: CWE-184
- [OpenClaw's complex interpreter pipelines could skip exec script preflight validation](https://agentprime.io/advisories/GHSA-fvx6-pj3r-5q4q.md)
  `GHSA-fvx6-pj3r-5q4q`, `CVE-2026-34425` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 5.3 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: CWE-184
- [Directus: Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow](https://agentprime.io/advisories/GHSA-cf45-hxwj-4cfj.md)
  `GHSA-cf45-hxwj-4cfj`, `CVE-2026-35410` · npm `directus`: affected `<11.16.1`, fixed in `11.16.1` · CVSS 6.1 Medium · Not analysed yet · Published 4 Apr 2026 · Tags: Open redirect, CWE-20, CWE-184
- [OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables](https://agentprime.io/advisories/GHSA-cg7q-fg22-4g98.md)
  `GHSA-cg7q-fg22-4g98`, `CVE-2026-41369` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 7.1 High · Not analysed yet · Published 3 Apr 2026 · Tags: Information disclosure, CWE-184
- [Duplicate Advisory: OpenClaw's complex interpreter pipelines could skip exec script preflight validation](https://agentprime.io/advisories/GHSA-rf75-g96h-j3rm.md)
  `GHSA-rf75-g96h-j3rm` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 5.4 Medium · Withdrawn · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-184
- [Duplicate Advisory: OpenClaw: Windows media loaders accepted remote-host file URLs before local path validation](https://agentprime.io/advisories/GHSA-8h8f-7cxm-m38j.md)
  `GHSA-8h8f-7cxm-m38j` · npm `openclaw`: affected `<2026.3.22`, fixed in `2026.3.22` · CVSS 7.6 High · Withdrawn · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-184
- [OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic](https://agentprime.io/advisories/GHSA-7ggg-pvrf-458v.md)
  `GHSA-7ggg-pvrf-458v`, `CVE-2026-41391` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 5.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-184, CWE-807
- [ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary local files by using unblocked X...](https://agentprime.io/advisories/PYSEC-2026-2131.md)
  `PYSEC-2026-2131`, `CVE-2026-35000` · PyPI `changedetection-io`: affected `<0.54.7`, fixed in `0.54.7` · CVSS 7.1 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-184
- [ByteDance DeerFlow LocalSandboxProvider Host Bash Escape](https://agentprime.io/advisories/CVE-2026-34430.md)
  `CVE-2026-34430` · CVE record: Bytedance Inc. DeerFlow · CVSS 8.6 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-184
- [OpenClaw SSRF guard misses four IPv6 special-use ranges](https://agentprime.io/advisories/GHSA-g86v-f9qv-rh6m.md)
  `GHSA-g86v-f9qv-rh6m`, `CVE-2026-41361` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.1 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [OpenClaw host-env blocklist missing \`GIT_TEMPLATE_DIR\` and \`AWS_CONFIG_FILE\` allows code execution via env override](https://agentprime.io/advisories/GHSA-m866-6qv5-p2fg.md)
  `GHSA-m866-6qv5-p2fg`, `CVE-2026-41332` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.8 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-184
- [OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe](https://agentprime.io/advisories/CVE-2026-33396.md)
  `CVE-2026-33396` · CVE record: OneUptime oneuptime · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2026 · Tags: Command injection, CWE-184, CWE-693
- [Invoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items](https://agentprime.io/advisories/GHSA-98wm-cxpw-847p.md)
  `GHSA-98wm-cxpw-847p`, `CVE-2026-33628`, `PKSA-txpv-wmxc-xy2c` · Packagist `invoiceninja/invoiceninja`: affected `<5.13.4`, fixed in `5.13.4` · CVSS 5.4 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Cross-site scripting (XSS), CWE-116, CWE-184
- [PbootCMS File Upload file.php incomplete blacklist](https://agentprime.io/advisories/CVE-2026-4509.md)
  `CVE-2026-4509` · CVE record: PbootCMS · CVSS 5.3 Medium · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-183, CWE-184
- [Duplicate Advisory: allowlist exec-guard bypass via env -S](https://agentprime.io/advisories/GHSA-x742-88jj-7hv9.md)
  `GHSA-x742-88jj-7hv9` · npm `openclaw`: affected `*`, no fixed version yet · CVSS 7.1 High · Withdrawn · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-184
- [Duplicate Advisory: OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains](https://agentprime.io/advisories/GHSA-5326-6f73-m96w.md)
  `GHSA-5326-6f73-m96w` · npm `openclaw`: affected `*`, no fixed version yet · CVSS 4.8 Medium · Withdrawn · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-184
- [PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution](https://agentprime.io/advisories/GHSA-v3xv-8vc3-h2m6.md)
  `GHSA-v3xv-8vc3-h2m6`, `CVE-2026-33139`, `PYSEC-2026-3030` · PyPI `pyspector`: affected `<0.1.7`, fixed in `0.1.7` · CVSS 8.3 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-184
- [SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)](https://agentprime.io/advisories/GHSA-4mx9-3c2h-hwhg.md)
  `GHSA-4mx9-3c2h-hwhg`, `CVE-2026-32940`, `GO-2026-4721` · Go `github.com/siyuan-note/siyuan`: affected `<=0.0.0-20260313024916-fd6526133bb3`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Mar 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [SiYuan globalCopyFiles: incomplete sensitive path blocklist allows reading /proc and Docker secrets](https://agentprime.io/advisories/GHSA-h5vh-m7fg-w5h6.md)
  `GHSA-h5vh-m7fg-w5h6`, `CVE-2026-32747`, `GO-2026-4705` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<=0.0.0-20260313024916-fd6526133bb3`, no fixed version yet · CVSS 6.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Path traversal, CWE-184
- [fickling's \`platform\` module subprocess invocation evades \`check_safety()\` with \`LIKELY_SAFE\`](https://agentprime.io/advisories/GHSA-5cxw-w2xg-2m8h.md)
  `GHSA-5cxw-w2xg-2m8h` · PyPI `fickling`: affected `<0.1.10`, fixed in `0.1.10` · CVSS 4.0, no score published · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-184
- [fickling modules linecache, difflib and gc are missing from the unsafe modules blocklist](https://agentprime.io/advisories/GHSA-r48f-3986-4f9c.md)
  `GHSA-r48f-3986-4f9c` · PyPI `fickling`: affected `<0.1.10`, fixed in `0.1.10` · CVSS 4.0, no score published · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-184
- [FastGPT Python Sandbox Bypass of File-Write Restriction](https://agentprime.io/advisories/CVE-2026-32128.md)
  `CVE-2026-32128` · CVE record: labring FastGPT · CVSS 6.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-184
- [OpenClaw: fetch-guard forwards custom authorization headers across cross-origin redirects](https://agentprime.io/advisories/GHSA-6mgf-v5j7-45cr.md)
  `GHSA-6mgf-v5j7-45cr`, `CVE-2026-32913` · npm `openclaw`: affected `<2026.3.7`, fixed in `2026.3.7` · CVSS 8.8 High · Not analysed yet · Published 9 Mar 2026 · Tags: Hard-coded credentials, CWE-116, CWE-184
- [OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers](https://agentprime.io/advisories/GHSA-3h2q-j2v4-6w5r.md)
  `GHSA-3h2q-j2v4-6w5r` · npm `openclaw`: affected `<2026.3.7`, fixed in `2026.3.7` · CVSS 5.0 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Broken access control, CWE-184
- [SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality](https://agentprime.io/advisories/GHSA-5r2p-pjr8-7fh7.md)
  `GHSA-5r2p-pjr8-7fh7` · PyPI `sagemaker`: affected `>=3.0.0, <3.4.0`, fixed in `3.4.0` · CVSS 4.0, no score published · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-184
- [Fickling missing RCE-capable modules in UNSAFE_IMPORTS](https://agentprime.io/advisories/GHSA-5hwf-rc88-82xm.md)
  `GHSA-5hwf-rc88-82xm` · PyPI `fickling`: affected `<0.1.9`, fixed in `0.1.9` · CVSS 4.0, no score published · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-184
- [In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program](https://agentprime.io/advisories/GHSA-4gc7-qcvf-38wg.md)
  `GHSA-4gc7-qcvf-38wg`, `CVE-2026-32010` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 5.8 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, CWE-184
- [OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write](https://agentprime.io/advisories/GHSA-3x3x-h76w-hp98.md)
  `GHSA-3x3x-h76w-hp98`, `CVE-2026-32017` · npm `openclaw`: affected `<2026.2.19`, fixed in `2026.2.19` · CVSS 6.0 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-184
- [OpenClaw: shell-env trusted-prefix fallback allowed attacker-controlled binary execution via $SHELL](https://agentprime.io/advisories/GHSA-p4wh-cr8m-gm6c.md)
  `GHSA-p4wh-cr8m-gm6c`, `CVE-2026-22217` · npm `openclaw`: affected `>=2026.2.22, <2026.2.23`, fixed in `2026.2.23` · CVSS 5.8 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-184, CWE-829
- [Craft CMS has Twig Function Blocklist Bypass](https://agentprime.io/advisories/GHSA-5fvc-7894-ghp4.md)
  `GHSA-5fvc-7894-ghp4`, `CVE-2026-28783`, `PKSA-x1f7-3vrt-jvfj` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.17.0-beta.1 || >=5.0.0-RC1, <5.9.0-beta.1`, fixed in `4.17.0-beta.1`, `5.9.0-beta.1` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2026 · Tags: Code injection, CWE-184
- [PickleScan has multiple stdlib modules with direct RCE not in blocklist](https://agentprime.io/advisories/GHSA-g38g-8gr9-h9xp.md)
  `GHSA-g38g-8gr9-h9xp`, `CVE-2026-56315`, `PYSEC-2026-4134` · PyPI `picklescan`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-184, CWE-693
- [OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass)](https://agentprime.io/advisories/GHSA-3xfw-4pmr-4xc5.md)
  `GHSA-3xfw-4pmr-4xc5`, `CVE-2026-32022` · npm `openclaw`: affected `<2026.2.21`, fixed in `2026.2.21` · CVSS 6.0 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-184
- [OpenClaw has allowlist exec-guard bypass via env -S](https://agentprime.io/advisories/GHSA-48wf-g7cp-gr3m.md)
  `GHSA-48wf-g7cp-gr3m`, `CVE-2026-31992` · npm `openclaw`: affected `<2026.2.23`, fixed in `2026.2.23` · CVSS 7.1 High · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-184, CWE-193
- [OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c)](https://agentprime.io/advisories/GHSA-gwqp-86q6-w47g.md)
  `GHSA-gwqp-86q6-w47g`, `CVE-2026-22175` · npm `openclaw`: affected `<2026.2.23`, fixed in `2026.2.23` · CVSS 7.1 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-184
- [OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains](https://agentprime.io/advisories/GHSA-5f9p-f3w2-fwch.md)
  `GHSA-5f9p-f3w2-fwch`, `CVE-2026-31993` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 5.6 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control, CWE-184
- [OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode](https://agentprime.io/advisories/GHSA-3c6h-g97w-fg78.md)
  `GHSA-3c6h-g97w-fg78`, `CVE-2026-28363`, `CVE-2026-32059`, `GHSA-7977-c43c-xpwj` · npm `openclaw`: affected `<2026.2.23`, fixed in `2026.2.23` · CVSS 8.7 High · Not analysed yet · Published 27 Feb 2026 · Tags: Broken access control, CWE-184
- [Fickling has safety check bypass via REDUCE+BUILD opcode sequence](https://agentprime.io/advisories/GHSA-mhc9-48gj-9gp3.md)
  `GHSA-mhc9-48gj-9gp3` · PyPI `fickling`: affected `<0.1.8`, fixed in `0.1.8` · CVSS 4.0, no score published · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-184
- [IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.](https://agentprime.io/advisories/CVE-2026-1773.md)
  `CVE-2026-1773` · CVE record: Hitachi Energy RTU500 series CMU firmware · CVSS 8.7 High · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-184
- [Fickling has a detection bypass via stdlib network-protocol constructors](https://agentprime.io/advisories/GHSA-83pf-v6qq-pwmr.md)
  `GHSA-83pf-v6qq-pwmr` · PyPI `fickling`: affected `<0.1.8`, fixed in `0.1.8` · CVSS 4.0, no score published · Not analysed yet · Published 20 Feb 2026 · Tags: CWE-184
- [OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags](https://agentprime.io/advisories/GHSA-4685-c5cp-vp95.md)
  `GHSA-4685-c5cp-vp95`, `CVE-2026-31996` · npm `openclaw`: affected `<2026.2.19`, fixed in `2026.2.19` · CVSS 2.0 Low · Not analysed yet · Published 19 Feb 2026 · Tags: Command injection, CWE-184
- [Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER](https://agentprime.io/advisories/GHSA-97f8-7cmv-76j2.md)
  `GHSA-97f8-7cmv-76j2`, `CVE-2026-53875`, `PYSEC-2026-2873` · PyPI `picklescan`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 7.1 High · Not analysed yet · Published 18 Feb 2026 · Tags: Code injection, CWE-184
- [FUXA Affected by a Path Traversal Sanitization Bypass](https://agentprime.io/advisories/GHSA-68m5-5w2h-h837.md)
  `GHSA-68m5-5w2h-h837`, `CVE-2026-25951` · npm `fuxa-server`: affected `<1.2.11`, fixed in `1.2.11` · CVSS 8.6 High · Not analysed yet · Published 10 Feb 2026 · Tags: Path traversal, CWE-184
- [Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist](https://agentprime.io/advisories/GHSA-q5qq-mvfm-j35x.md)
  `GHSA-q5qq-mvfm-j35x`, `CVE-2026-22609`, `PYSEC-2026-1372` · PyPI `fickling`: affected `<0.1.7`, fixed in `0.1.7` · CVSS 8.9 High · Not analysed yet · Published 9 Jan 2026 · Tags: Insecure deserialization, CWE-184
- [Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection](https://agentprime.io/advisories/GHSA-5hvc-6wx8-mvv4.md)
  `GHSA-5hvc-6wx8-mvv4`, `CVE-2026-22608`, `PYSEC-2026-1369` · PyPI `fickling`: affected `<0.1.7`, fixed in `0.1.7` · CVSS 8.9 High · Not analysed yet · Published 9 Jan 2026 · Tags: Insecure deserialization, CWE-184
- [Fickling Blocklist Bypass: cProfile.run()](https://agentprime.io/advisories/GHSA-p523-jq9w-64x9.md)
  `GHSA-p523-jq9w-64x9`, `CVE-2026-22607`, `PYSEC-2026-1371` · PyPI `fickling`: affected `<0.1.7`, fixed in `0.1.7` · CVSS 8.9 High · Not analysed yet · Published 9 Jan 2026 · Tags: Insecure deserialization, CWE-184
- [Fickling has a bypass via runpy.run_path() and runpy.run_module()](https://agentprime.io/advisories/GHSA-wfq2-52f7-7qvj.md)
  `GHSA-wfq2-52f7-7qvj`, `CVE-2026-22606`, `PYSEC-2026-1373` · PyPI `fickling`: affected `<0.1.7`, fixed in `0.1.7` · CVSS 8.9 High · Not analysed yet · Published 9 Jan 2026 · Tags: Insecure deserialization, CWE-184
- [libsodium has Incomplete List of Disallowed Inputs](https://agentprime.io/advisories/GHSA-mrfv-m5wm-5w6w.md)
  `GHSA-mrfv-m5wm-5w6w`, `CVE-2025-69277`, `PKSA-bjyb-w14t-61js`, `PYSEC-2026-1448`, `PYSEC-2026-3002` · Packagist `paragonie/sodium_compat` and 2 more: affected `<1.24.0 || >=2, <2.5.0`, fixed in `1.24.0`, `2.5.0` · CVSS 4.5 Medium · Not analysed yet · Published 31 Dec 2025 · Tags: CWE-184
- [Picklescan has Incomplete List of Disallowed Inputs](https://agentprime.io/advisories/GHSA-84r2-jw7c-4r5q.md)
  `GHSA-84r2-jw7c-4r5q`, `CVE-2025-71320`, `PYSEC-2026-1785` · PyPI `picklescan`: affected `<0.0.33`, fixed in `0.0.33` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Dec 2025 · Tags: CWE-184
- [Picklescan does not block ctypes](https://agentprime.io/advisories/GHSA-4675-36f9-wf6r.md)
  `GHSA-4675-36f9-wf6r`, `CVE-2025-71323`, `PYSEC-2026-1782` · PyPI `picklescan`: affected `<0.0.33`, fixed in `0.0.33` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Dec 2025 · Tags: CWE-184, CWE-913
- [Fickling has Code Injection vulnerability via pty.spawn()](https://agentprime.io/advisories/GHSA-r7v6-mfhq-g3m2.md)
  `GHSA-r7v6-mfhq-g3m2`, `CVE-2025-67748`, `PYSEC-2025-113` · PyPI `fickling`: affected `<0.1.6`, fixed in `0.1.6` · CVSS 7.1 High · Not analysed yet · Published 15 Dec 2025 · Tags: Code injection, Insecure deserialization, CWE-184
- [Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list](https://agentprime.io/advisories/GHSA-565g-hwwr-4pp3.md)
  `GHSA-565g-hwwr-4pp3`, `CVE-2025-67747`, `PYSEC-2026-1368` · PyPI `fickling`: affected `<0.1.6`, fixed in `0.1.6` · CVSS 7.1 High · Not analysed yet · Published 15 Dec 2025 · Tags: Insecure deserialization, CWE-184
- [Improper Validation of Query Parameters in Auth0 Next.js SDK](https://agentprime.io/advisories/GHSA-mr6f-h57v-rpj5.md)
  `GHSA-mr6f-h57v-rpj5`, `CVE-2025-67716` · npm `@auth0/nextjs-auth0`: affected `>=4.9.0, <4.13.0`, fixed in `4.13.0` · CVSS 5.7 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-184
- [PrestaShop Checkout Target PayPal merchant account hijacking from backoffice](https://agentprime.io/advisories/GHSA-wvpg-4wrh-5889.md)
  `GHSA-wvpg-4wrh-5889`, `CVE-2025-61924`, `PKSA-2hfz-bts5-gnys` · Packagist `prestashop/ps_checkout`: affected `<4.4.1 || >=5.0.0, <5.0.5`, fixed in `4.4.1`, `5.0.5` · CVSS 3.8 Low · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-184
- [Microsoft Windows: The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the…](https://agentprime.io/advisories/CVE-2022-50238.md)
  `CVE-2022-50238` · CVE record: Microsoft Windows · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2025 · Tags: CWE-184, CWE-820
- [Promptcraft Forge Studio's incomplete URL check is vulnerable to XSS via SVG](https://agentprime.io/advisories/CVE-2025-58361.md)
  `CVE-2025-58361` · CVE record: MarceloTessaro promptcraft-forge-studio · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2025 · Tags: Cross-site scripting (XSS), CWE-20, CWE-184
- [Promptcraft Forge Studio: Complete Sanitizer Bypass Enables XSS via Overlapping Patterns](https://agentprime.io/advisories/CVE-2025-58353.md)
  `CVE-2025-58353` · CVE record: MarceloTessaro promptcraft-forge-studio · CVSS 8.2 High · Not analysed yet · Published 4 Sept 2025 · Tags: Cross-site scripting (XSS), CWE-20, CWE-184
- [WWBN AVideo: An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master…](https://agentprime.io/advisories/CVE-2025-48732.md)
  `CVE-2025-48732` · CVE record: WWBN AVideo · CVSS 7.3 High · Not analysed yet · Published 24 Jul 2025 · Tags: CWE-184
- [Unsafe handling of AJAX calls](https://agentprime.io/advisories/CVE-2025-24388.md)
  `CVE-2025-24388` · CVE record: OTRS AG OTRS and 1 more · CVSS 3.8 Low · Not analysed yet · Published 16 Jun 2025 · Tags: CWE-184
- [A vulnerability exists in the media upload component of the Asset Suite versions listed below.](https://agentprime.io/advisories/CVE-2025-1484.md)
  `CVE-2025-1484` · CVE record: Hitachi Energy Asset Suite · CVSS 6.3 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-184
- [Duplicate Advisory: Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate](https://agentprime.io/advisories/GHSA-4p4h-9gvq-7xfg.md)
  `GHSA-4p4h-9gvq-7xfg` · PyPI `picklescan`: affected `*`, no fixed version yet · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 24 Apr 2025 · Tags: CWE-184

Newest: <https://agentprime.io/advisories/tag/cwe-184.md>
Older: <https://agentprime.io/advisories/tag/cwe-184.md?cursor=WyIyMDI1LTA0LTI0VDAzOjMxOjMyLjAwMDAwMFoiLCJHSFNBLTRwNGgtOWd2cS03eGZnIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-184&cursor=WyIyMDI2LTA0LTA3VDE4OjE1OjQ4LjAwMDAwMFoiLCJHSFNBLTk4Y2gtNDV3cC1jaDQ3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-184/?cursor=WyIyMDI2LTA0LTA3VDE4OjE1OjQ4LjAwMDAwMFoiLCJHSFNBLTk4Y2gtNDV3cC1jaDQ3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.