CWE-693.

DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)

• Cross-site scripting (XSS)
• CWE-693

<3.4.17 · fixed in 3.4.17

Sentry-Javascript: Middleware Bypass when using Tunnel route

• CWE-693

>=9.36.0, <9.47.2 || >=10.0.0-alpha.0, <10.75.2 || >=11.0.0-alpha.0, <11.0.0-rc.1 · fixed in 9.47.2, 10.75.2, 11.0.0-rc.1

Protection Mechanism Failure in Splunk SOAR

• Splunk SOAR
• CWE-693

Security Hardening in Splunk Enterprise - October 2026

• Splunk Enterprise
• CWE-693

OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies

• CWE-693

<3.4.13 · fixed in 3.4.13

Protection mechanism failure in Oracle Corporation Oracle Java SE and others

• Oracle Corporation Oracle Java SE
• Oracle Corporation Oracle JavaFX
• CWE-693

Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts

• Bandisoft Bandizip
• CWE-693

Protection mechanism failure in Apple Xcode

• Apple Xcode
• Broken access control
• CWE-693

Dolibarr CSP document.php protection mechanism

• Dolibarr
• CWE-693

radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism

• radareorg radare2
• CWE-693

dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open

• Dicklesworthstone destructive_command_guard
• Denial of service
• CWE-693

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

• CWE-693

>=4.4.0, <5.8.8 · fixed in 5.8.8

Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE

• CWE-693

>=1.9.10-0.20250506154222-1330888280a2, <1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)

• CWE-20
• CWE-693

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context

• CWE-693

<1.9.10-0.20260703131214-23d1934099b0 · fixed in 1.9.10-0.20260703131214-23d1934099b0

Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation

• PeaZip
• CWE-184
• CWE-693

Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

• PeaZip
• Path traversal
• CWE-693

Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request

• renovate
• mend renovate-ce
• CWE-693

OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism

• OpenClaw ClawScan
• CWE-693

Gitea required Actions check bypass through skipped workflows

• Gitea
• Broken access control
• CWE-345

Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions

• Red Hat Hardened Images
• CWE-693

heym Python Tool Sandbox Escape

• heym
• Command injection
• Code injection

Mitigation bypass in the File Handling component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the File Handling component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the DOM: Core & HTML component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the Enterprise Policies component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the Networking: HTTP component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Sandbox escape in the DOM: Content Processes component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the DOM: Security component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the Enterprise Policies component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Mitigation bypass in the DOM: Security component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Super Productivity: SuperSync E2EE setup uploads and stores all user operations in plaintext before password is set

• super-productivity
• Information disclosure
• CWE-693

Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying

• ZcashFoundation zebra
• CWE-693

Hex release-age cooldown is lifted package-wide when the locked release is retired

• hex
• CWE-693

PraisonAI: Shell command allowlist bypass via find -exec built-in action

• Command injection
• CWE-693

<4.6.78 · fixed in 4.6.78

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Security Verify Access
• IBM Verify Identity Access
• CWE-693

PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

• CWE-693

<4.6.78 · fixed in 4.6.78

Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

• CWE-172
• CWE-193

>=3.0.0, <3.8.0 · fixed in 3.8.0

FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()

• FFmpeg
• CWE-693

AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS

• Authentication bypass
• CWE-693

>=3.0.0, <3.0.14 || >=2.1.0, <=2.16.1 · fixed in 3.0.14

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

• CWE-693
• CWE-829

<1.6.78 · fixed in 1.6.78

Protection Mechanism Failure in Splunk Enterprise

• Splunk Enterprise
• CWE-693

PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

• CWE-116
• CWE-693

<4.6.78 · fixed in 4.6.78

Hydra: Mutable instantiate policy sets allow target blocklist bypass

• Code injection
• CWE-693

>=1.3.4, <1.3.7 || >=1.4.0.dev4, <1.4.0.dev10 · fixed in 1.3.7, 1.4.0.dev10

vm2 contains a sandbox escape vulnerability

• CWE-693
• CWE-913

<3.12.1 · fixed in 3.12.1

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• CWE-693

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• CWE-693

Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

• Denial of service
• CWE-693

>=3.0.0, <3.8.1 · fixed in 3.8.1

Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

• CWE-20
• CWE-693

>=3.4.0, <3.8.0 · fixed in 3.8.0

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Mitigation bypass in the File Handling component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM

• CWE-693

<3.11.8 · fixed in 3.11.8

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

• CWE-693

<3.11.8 · fixed in 3.11.8

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

• Information disclosure
• CWE-693

<3.11.8 · fixed in 3.11.8

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

• CWE-693
• CWE-913

>=3.10.1, <3.11.7 · fixed in 3.11.7

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docli...

• Information disclosure
• CWE-693

>=2.83.0, <2.131.0 · fixed in 2.131.0

ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE

• ImageMagick
• CWE-693

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

• CWE-693

>=3.9.6, <3.11.7 · fixed in 3.11.7

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

• CWE-471
• CWE-693

>=3.9.6, <3.11.7 · fixed in 3.11.7

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

• Code injection
• CWE-693

>=3.11.6, <3.11.7 · fixed in 3.11.7