The expression "including, but not limited to" arose and is usually used in legal or other official contexts. It isn't really necessary, as a simple 'including' has the same legal force. The word 'including' doesn't suggest exclusivity, so the 'not limited to' is superfluous.
Do you need a comma in including but not limited to?
Q. What punctuation is required for “including but not limited to”? ... No punctuation is required, but commas after including and to would work just fine; they may be helpful if the phrase introduces a long or complex list. Dashes would work as well.