bbot vulnerabilities (PyPI)
10 vulnerabilities.
-
bbotPyPI Path traversal in github_workflows allows writing artifacts outside output directory 3.1 Low -
bbotPyPI Symlink guard bypass in unarchive module allows planting symlinks during extraction 3.1 Low -
bbotPyPI Arbitrary File Write in postman_download module 6.5 Medium -
bbotPyPI Symlink-following arbitrary write via github_workflows module 2.2 Low -
bbotPyPI SSRF via unvalidated WWW-Authenticate realm in docker_pull module 3.1 Low -
bbotPyPI Path Traversal (Zip-Slip) in unarchive module 5.3 Medium -
bbotPyPI Improper Archive Extraction in unarchive Enables RCE 9.6 Critical -
bbotPyPI Improper .git Sanitization in gitdumper Enables RCE 9.6 Critical -
bbotPyPI GitLab Domain Confusion in gitlab Leaks API Key 4.7 Medium -
bbotPyPI Insecure URL Handling in git_clone Leading to Leaked API Key 4.7 Medium