Blacklanternsecurity Bbot
2 CVEs affecting Blacklanternsecurity Bbot. Latest disclosed: 2026-07-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14967 | Low | 3.1 | 2026-07-08 | BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not re… |
CVE-2026-14966 | Low | 3.1 | 2026-07-08 | BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing c… |