CWE-501 Trust Boundary Violation

vLLM: OpenAI auth bypass

DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`

gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks

OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel

OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the intended `exec-event` downgrade

Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json

Class Loading Vulnerability in Artemis

Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox

Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual JSON specification

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

kubevirt-csi: PersistentVolume allows access to HCP's root node

Open Cluster Management vulnerable to Trust Boundary Violation

Context isolation bypass via contextBridge in Electron

Context isolation bypass via Promise in Electron

Context isolation bypass via leaked cross-context objects in Electron