Security
فارسی
All products

bbot

PyPI · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
BBOT's various issues in unarchive.py can cause arbitrary file write and RCECVE-2025-10284 · GHSA-FHW8-8V9P-7JP7Version ranges need review. bbot PyPI Critical Fix reported
BBOT's insufficient sanitization issues in gitdumper.py can lead to RCECVE-2025-10283 · GHSA-H6M2-R6H9-4C44Version ranges need review. bbot PyPI Critical Fix reported
BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionCVE-2026-14966 · GHSA-XPF3-P7GM-7756Version ranges need review. bbot PyPI Low Fix reported
PYSEC-2026-3720CVE-2026-14967 · PYSEC-2026-3720 bbot PyPI Low Fix reported
BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284CVE-2026-12565 · GHSA-3VGW-585J-4M45Version ranges need review. bbot PyPI Medium Fix reported
BBOT: Symlink-Following Arbitrary Write via github_workflows ModuleCVE-2026-12567 · GHSA-RVP7-W75Q-9FV2Version ranges need review. bbot PyPI Low Fix reported
BBOT: Arbitrary File Write in postman_download ModuleCVE-2026-12568 · GHSA-M54H-VHF9-3W3MVersion ranges need review. bbot PyPI Medium Fix reported
BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsingCVE-2026-12566 · GHSA-3MP7-VP6J-2MXXVersion ranges need review. bbot PyPI Low Fix reported
BBOT's gitlab.py exposes globally configured "gitlab" API keyCVE-2025-10282 · GHSA-P3V4-C93G-CMHWVersion ranges need review. bbot PyPI Medium Fix reported
BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserverCVE-2025-10281 · GHSA-63WH-P5FX-H4VCVersion ranges need review. bbot PyPI Medium Fix reported