CWE-183 Permissive List of Allowed Inputs

Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability

Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

Duplicate Advisory: Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

DOMPurify ADD_ATTR predicate skips URI validation

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

Duplicate Advisory: PickleScan's pkgutil.resolve_name has a universal blocklist bypass

mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling

filebrowser Allows Shell Commands to Spawn Other Commands

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching

OpenClaw: Empty approver lists could grant explicit approval authorization

OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides

Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Netfoil has incorrect allowlist enforcement

DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)

Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk)

Astro: Remote allowlist bypass via unanchored matchPathname wildcard

Permissive List of Allowed Inputs in ewe