CWE-184 Incomplete List of Disallowed Inputs

Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)

Handlebars: JavaScript Injection via Own Property Check Bypass

Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost: Stored XSS via oEmbed Photo Responses

jolokia-service-jsr160 Incomplete target JMX Service URL deny list handling for user-controlled input

Hydra instantiate target blacklist bypasses permit code execution

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

simple-git unsafe-operation guard does not block trailer command configuration

DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.

SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

PickleScan has multiple stdlib modules with direct RCE not in blocklist

@bytebase/dbhub's read-only mode does not prevent database writes

Duplicate Advisory: PickleScan has multiple stdlib modules with direct RCE not in blocklist

MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)

@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

Grav: XSS Blueprint Validation Bypass via Twig String Concatenation

Picklescan missing detection when calling built-in python library function timeit.timeit()

Duplicate Advisory: Picklescan missing detection when calling built-in python library function timeit.timeit()

jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

SVGO: removeScripts allows executable links through namespace and control-character bypasses

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)

Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Craft CMS: Arbitrary file read via SplFileObject in non-sandboxed template contexts

Duplicate Advisory: Craft CMS: Arbitrary file read via SplFileObject in non-sandboxed template contexts