# CWE-184.

Every Advisory and CVE whose sources give the weakness CWE-184, newest first.

## Records, newest first (an older page)

- [SVGO: removeScripts allows executable links through namespace and control-character bypasses](https://agentprime.io/advisories/GHSA-w27v-7q3p-w38r.md)
  `GHSA-w27v-7q3p-w38r`, `CVE-2026-84370` · npm `svgo`: affected `>=1.0.0, <2.8.4 || >=3.0.0, <3.3.5 || >=4.0.0, <4.1.0`, fixed in `2.8.4`, `3.3.5`, `4.1.0` · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator](https://agentprime.io/advisories/CVE-2026-82536.md)
  `CVE-2026-82536` · CVE record: RooCodeInc Roo-Code · CVSS 7.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-184
- [Active Directory Certificate Services (AD CS) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-69624.md)
  `CVE-2026-69624` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-184
- [Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-70334.md)
  `CVE-2026-70334` · CVE record: Microsoft Visual Studio Code · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-184
- [BDS Module Bypass Secure Boot Advisory](https://agentprime.io/advisories/CVE-2026-33197.md)
  `CVE-2026-33197` · CVE record: AMI AptioV · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-184
- [An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server](https://agentprime.io/advisories/CVE-2026-85787.md)
  `CVE-2026-85787` · CVE record: Amazon postgres-mcp-server · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-184
- [DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)](https://agentprime.io/advisories/GHSA-gcr2-9v8m-gq45.md)
  `GHSA-gcr2-9v8m-gq45`, `CVE-2026-68921` · npm `@dicebear/core` and 1 more: affected `<9.4.3`, fixed in `9.4.3` · CVSS 4.7 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/\_shell.py](https://agentprime.io/advisories/GHSA-7mqg-cx4g-x2rf.md)
  `GHSA-7mqg-cx4g-x2rf`, `CVE-2026-62676`, `PYSEC-2026-3873` · PyPI `omnigent`: affected `<0.3.0`, fixed in `0.3.0` · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-184
- [Nexus Repository 3 - Script Execution Disable Setting Not Enforced](https://agentprime.io/advisories/CVE-2026-77124.md)
  `CVE-2026-77124` · CVE record: Sonatype Nexus Repository 3 · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-184
- [jolokia-service-jsr160 Incomplete target JMX Service URL deny list handling for user-controlled input](https://agentprime.io/advisories/GHSA-c9ff-59g8-m36q.md)
  `GHSA-c9ff-59g8-m36q`, `CVE-2026-84218` · Maven `org.jolokia:jolokia-service-jsr160`: affected `<2.6.2`, fixed in `2.6.2` · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-184
- [RestrictedPython guard hooks can be shadowed via positional-only arguments](https://agentprime.io/advisories/GHSA-ffg3-p8fm-mjx2.md)
  `GHSA-ffg3-p8fm-mjx2`, `CVE-2026-55830`, `PYSEC-2026-3917` · PyPI `restrictedpython`: affected `<8.3`, fixed in `8.3` · CVSS 8.3 High · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-184
- [An input reflection vulnerability affects HCL Traveler](https://agentprime.io/advisories/CVE-2026-56547.md)
  `CVE-2026-56547` · CVE record: HCLSoftware Traveler · CVSS 3.5 Low · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-20, CWE-184
- [NVIDIA OpenShell: NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API…](https://agentprime.io/advisories/CVE-2026-65083.md)
  `CVE-2026-65083` · CVE record: NVIDIA OpenShell · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-184
- [Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode](https://agentprime.io/advisories/CVE-2026-76072.md)
  `CVE-2026-76072` · CVE record: continuedev continue · CVSS 8.3 High · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-184
- [Limit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email](https://agentprime.io/advisories/CVE-2026-18356.md)
  `CVE-2026-18356` · CVE record: Unknown Limit Login Attempts Security · CVSS 3.7 Low · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-184
- [9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable](https://agentprime.io/advisories/CVE-2026-72860.md)
  `CVE-2026-72860` · CVE record: decolua 9router · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Atta...](https://agentprime.io/advisories/GHSA-9pgj-v69p-q586.md)
  `GHSA-9pgj-v69p-q586`, `CVE-2026-74886`, `PYSEC-2026-3763` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-184
- [Flowise before 3.1.3 Sandbox Escape via Pandas Methods](https://agentprime.io/advisories/CVE-2026-73484.md)
  `CVE-2026-73484` · CVE record: FlowiseAI Flowise · CVSS 8.6 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-184
- [compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0](https://agentprime.io/advisories/GHSA-h47f-gmjp-m7rr.md)
  `GHSA-h47f-gmjp-m7rr`, `CVE-2026-52776`, `PYSEC-2026-3659` · PyPI `compliance-trestle`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 8.6 High · Not analysed yet · Published 12 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Fortinet FortiWeb: A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through…](https://agentprime.io/advisories/CVE-2026-70466.md)
  `CVE-2026-70466` · CVE record: Fortinet FortiWeb and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-184
- [Vim: Arbitrary Code Execution via Netrw Menu Construction](https://agentprime.io/advisories/CVE-2026-73078.md)
  `CVE-2026-73078` · CVE record: vim vim · CVSS 8.6 High · Not analysed yet · Published 11 Aug 2026 · Tags: Command injection, CWE-184
- [Duplicate Advisory: Craft CMS: Arbitrary file read via SplFileObject in non-sandboxed template contexts](https://agentprime.io/advisories/GHSA-2p2v-3mjg-gfpf.md)
  `GHSA-2p2v-3mjg-gfpf` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1`, no fixed version yet · CVSS 4.5 Medium · Withdrawn · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-184
- [Craft CMS: Arbitrary file read via SplFileObject in non-sandboxed template contexts](https://agentprime.io/advisories/GHSA-957r-qf9p-67xw.md)
  `GHSA-957r-qf9p-67xw`, `CVE-2026-72779`, `PKSA-19kf-75v5-vy76` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.18.2 || >=5.0.0-RC1, <5.10.6`, fixed in `4.18.2`, `5.10.6` · CVSS 8.7 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-184
- [Langflow is affected by security vulnerabilities in Model Context Protocol features](https://agentprime.io/advisories/CVE-2026-17630.md)
  `CVE-2026-17630` · CVE record: IBM Langflow OSS · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-184
- [ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-71259.md)
  `CVE-2026-71259` · CVE record: esphome esphome · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-184
- [Ghost: Private IP filtering bypass to make server-side requests to internal services](https://agentprime.io/advisories/GHSA-wvp2-4qqp-4h3r.md)
  `GHSA-wvp2-4qqp-4h3r`, `BIT-ghost-2026-53944`, `CVE-2026-53944` · npm `ghost`: affected `>=6.0.9, <6.21.1`, fixed in `6.21.1` · CVSS 5.8 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE](https://agentprime.io/advisories/GHSA-52fh-8v99-63c2.md)
  `GHSA-52fh-8v99-63c2`, `CVE-2026-70470` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-184
- [Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)](https://agentprime.io/advisories/GHSA-xc48-889x-5qmw.md)
  `GHSA-xc48-889x-5qmw`, `CVE-2026-69263` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 8.7 High · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-184
- [@fastify/forwarded vulnerable to improper input validation via unstripped tab characters in X-Forwarded-For](https://agentprime.io/advisories/CVE-2026-18174.md)
  `CVE-2026-18174` · CVE record: @fastify/forwarded @fastify/forwarded · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: CWE-20, CWE-184
- [NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass](https://agentprime.io/advisories/GHSA-v8vm-cqh8-q87q.md)
  `GHSA-v8vm-cqh8-q87q`, `CVE-2026-52888` · npm `@nocobase/plugin-collection-sql`: affected `<2.0.62 || >=2.1.0-alpha.1, <2.1.0-alpha.46 || >=2.1.0-beta.1, <2.1.0-beta.45`, fixed in `2.0.62`, `2.1.0-alpha.46`, `2.1.0-beta.45` · CVSS 6.8 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Information disclosure, CWE-184
- [GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks](https://agentprime.io/advisories/GHSA-6p8h-3wgx-97gf.md)
  `GHSA-6p8h-3wgx-97gf`, `CVE-2026-73623`, `PYSEC-2026-3952` · PyPI `gitpython`: affected `<3.1.54`, fixed in `3.1.54` · CVSS 7.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection, CWE-184
- [Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush](https://agentprime.io/advisories/CVE-2026-50251.md)
  `CVE-2026-50251` · CVE record: NLnet Labs Unbound · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-184
- [Loofah \`allowed_uri?\` does not detect \`javascript:\` URIs split by numeric character references without semicolons](https://agentprime.io/advisories/GHSA-5qhf-9phg-95m2.md)
  `GHSA-5qhf-9phg-95m2`, `CVE-2026-73492` · RubyGems `loofah`: affected `>=2.25.0, <2.25.2`, fixed in `2.25.2` · CVSS 2.3 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist](https://agentprime.io/advisories/GHSA-2f96-g7mh-g2hx.md)
  `GHSA-2f96-g7mh-g2hx`, `CVE-2026-67325`, `PYSEC-2026-3836` · PyPI `gitpython`: affected `<3.1.51`, fixed in `3.1.51` · CVSS 8.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection, CWE-184
- [SVGO removeScripts plugin leaves some executable scripts intact](https://agentprime.io/advisories/GHSA-2p49-hgcm-8545.md)
  `GHSA-2p49-hgcm-8545`, `CVE-2026-73650` · npm `svgo`: affected `>=1.0.0, <2.8.3 || >=3.0.0, <3.3.4 || >=4.0.0, <4.0.2`, fixed in `2.8.3`, `3.3.4`, `4.0.2` · CVSS 8.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [DOMPurify: \`CUSTOM_ELEMENT_HANDLING\` bypasses \`afterSanitizeElements\` for allowed custom elements.](https://agentprime.io/advisories/GHSA-c2j3-45gr-mqc4.md)
  `GHSA-c2j3-45gr-mqc4`, `CVE-2026-66010` · npm `dompurify`: affected `<3.4.12`, fixed in `3.4.12` · CVSS 5.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184, CWE-693
- [Loofah \`allowed_uri?\` does not detect \`javascript:\` URIs split by named whitespace character references](https://agentprime.io/advisories/GHSA-8whx-365g-h9vv.md)
  `GHSA-8whx-365g-h9vv`, `CVE-2026-73491` · RubyGems `loofah`: affected `>=2.25.0, <2.25.2`, fixed in `2.25.2` · CVSS 2.3 Low · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-184
- [Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to \`javascript:\` execution](https://agentprime.io/advisories/GHSA-qfrw-5rxm-mhh2.md)
  `GHSA-qfrw-5rxm-mhh2`, `CVE-2026-59929`, `PYSEC-2026-2217` · PyPI `mistune`: affected `<3.3.0`, fixed in `3.3.0` · CVSS 6.1 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing](https://agentprime.io/advisories/CVE-2026-63108.md)
  `CVE-2026-63108` · CVE record: RooCodeInc Roo-Code · CVSS 7.7 High · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-184
- [princezuda SafestClaw Built-in Web shell.py ShellAction.\_validate_command incomplete blacklist](https://agentprime.io/advisories/CVE-2026-16129.md)
  `CVE-2026-16129` · CVE record: princezuda SafestClaw · CVSS 4.8 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: CWE-183, CWE-184
- [Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints](https://agentprime.io/advisories/CVE-2026-13448.md)
  `CVE-2026-13448` · CVE record: IBM Langflow OSS · CVSS 8.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-184
- [OpenClaw < 2026.6.6 Environment Variable Injection via rustup](https://agentprime.io/advisories/CVE-2026-62203.md)
  `CVE-2026-62203` · CVE record: OpenClaw OpenClaw · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-184
- [nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist](https://agentprime.io/advisories/CVE-2026-15625.md)
  `CVE-2026-15625` · CVE record: nextlevelbuilder GoClaw · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-183, CWE-184
- [OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport](https://agentprime.io/advisories/CVE-2026-62200.md)
  `CVE-2026-62200` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-184
- [OpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering](https://agentprime.io/advisories/CVE-2026-62199.md)
  `CVE-2026-62199` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-184
- [SiYuan: Stored XSS in Bazaar marketplace via package README event handlers](https://agentprime.io/advisories/GHSA-w7cg-whh7-xp28.md)
  `GHSA-w7cg-whh7-xp28`, `CVE-2026-54070`, `GO-2026-5965` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<0.0.0-20260628153353-2d5d72223df4`, fixed in `0.0.0-20260628153353-2d5d72223df4` · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [\`lxml_html_clean.Cleaner\` does not strip \`javascript:\` URLs from namespaced URL attributes](https://agentprime.io/advisories/GHSA-4jhm-jv67-739f.md)
  `GHSA-4jhm-jv67-739f`, `CVE-2026-49825`, `PYSEC-2026-2614` · PyPI `lxml-html-clean`: affected `<0.4.5`, fixed in `0.4.5` · CVSS 8.2 High · Not analysed yet · Published 8 Jul 2026 · Tags: Cross-site scripting (XSS), CWE-184
- [OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files](https://agentprime.io/advisories/CVE-2026-59261.md)
  `CVE-2026-59261` · CVE record: OpenClaw OpenClaw · CVSS 8.4 High · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-184
- [Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules \_posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because ...](https://agentprime.io/advisories/GHSA-m6fh-58r7-x697.md)
  `GHSA-m6fh-58r7-x697`, `CVE-2026-14534`, `PYSEC-2026-2149` · PyPI `fickling`: affected `<0.1.11`, fixed in `0.1.11` · CVSS 8.8 High · Not analysed yet · Published 4 Jul 2026 · Tags: Insecure deserialization, CWE-184
- [OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks](https://agentprime.io/advisories/GHSA-j472-gf56-x589.md)
  `GHSA-j472-gf56-x589`, `CVE-2026-53836` · npm `openclaw`: affected `<2026.5.12`, fixed in `2026.5.12` · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-184
- [PraisonAI vulnerable to sandbox escape via \`print.\_\_self\_\_\` builtins module leak in \`execute_code\` (subprocess mode)](https://agentprime.io/advisories/GHSA-4mr5-g6f9-cfrh.md)
  `GHSA-4mr5-g6f9-cfrh`, `CVE-2026-47392`, `PYSEC-2026-463`, `PYSEC-2026-483` · PyPI `praisonai`: affected `<4.6.40`, fixed in `4.6.40` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-184, CWE-693
- [PickleScan's profile.run blocklist mismatch allows exec() bypass](https://agentprime.io/advisories/GHSA-7wx9-6375-f5wh.md)
  `GHSA-7wx9-6375-f5wh`, `CVE-2026-53873`, `PYSEC-2026-455` · PyPI `picklescan`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-184
- [Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in \`AuthenticationFilter\`](https://agentprime.io/advisories/CVE-2026-49869.md)
  `CVE-2026-49869` · CVE record: kestra-io kestra · CVSS 10.0 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 26 Jun 2026 · Tags: Command injection, Authentication bypass, Server-side request forgery (SSRF), CWE-184
- [Mastodon: SSRF protection bypass on older Ruby versions](https://agentprime.io/advisories/CVE-2026-47389.md)
  `CVE-2026-47389` · CVE record: mastodon mastodon · CVSS 8.6 High · Not analysed yet · Published 24 Jun 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-184
- [jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)](https://agentprime.io/advisories/GHSA-rmj7-2vxq-3g9f.md)
  `GHSA-rmj7-2vxq-3g9f`, `CVE-2026-54513` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.10.0, <2.18.8 || >=2.19.0, <2.21.4 || >=3.0.0, <3.1.4`, fixed in `2.18.8`, `2.21.4`, `3.1.4` · CVSS 8.1 High · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-184
- [jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation](https://agentprime.io/advisories/GHSA-j3rv-43j4-c7qm.md)
  `GHSA-j3rv-43j4-c7qm`, `CVE-2026-54512` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.10.0, <2.18.8 || >=3.0.0, <3.1.4 || >=2.19.0, <2.21.4`, fixed in `2.18.8`, `3.1.4`, `2.21.4` · CVSS 8.1 High · Not analysed yet · Published 23 Jun 2026 · Tags: Insecure deserialization, CWE-184
- [Duplicate Advisory: PickleScan has multiple stdlib modules with direct RCE not in blocklist](https://agentprime.io/advisories/GHSA-g7vj-qw6x-g3p8.md)
  `GHSA-g7vj-qw6x-g3p8` · PyPI `picklescan`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-184
- [Duplicate Advisory: Picklescan missing detection when calling built-in python library function timeit.timeit()](https://agentprime.io/advisories/GHSA-fh2f-24rh-r2vq.md)
  `GHSA-fh2f-24rh-r2vq` · PyPI `picklescan`: affected `<0.0.25`, fixed in `0.0.25` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 21 Jun 2026 · Tags: CWE-184
- [Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247](https://agentprime.io/advisories/GHSA-8678-w3jw-xfc2.md)
  `GHSA-8678-w3jw-xfc2`, `CVE-2026-57234` · RubyGems `nokogiri`: affected `<1.19.4`, fixed in `1.19.4` · CVSS 2.6 Low · Not analysed yet · Published 19 Jun 2026 · Tags: XML external entities (XXE), CWE-178, CWE-184
- [OpenClaw: Shell positional parameters could weaken strict inline-eval checks](https://agentprime.io/advisories/GHSA-5cj2-3jr2-5h77.md)
  `GHSA-5cj2-3jr2-5h77`, `CVE-2026-53855` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 7.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, Privilege escalation, Broken access control, CWE-184

Newest: <https://agentprime.io/advisories/tag/cwe-184.md>
Older: <https://agentprime.io/advisories/tag/cwe-184.md?cursor=WyIyMDI2LTA2LTE4VDIwOjEyOjEyLjAwMDAwMFoiLCJHSFNBLTVjajItM2pyMi01aDc3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-184&cursor=WyIyMDI2LTA5LTA5VDA4OjE2OjUwLjUxMTAwMFoiLCJDVkUtMjAyNi03OTY5NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-184/?cursor=WyIyMDI2LTA5LTA5VDA4OjE2OjUwLjUxMTAwMFoiLCJDVkUtMjAyNi03OTY5NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.