Skip to contentBlsops, Llc Bbot vulnerabilities
- black lantern security bbotPath traversal in github_workflows allows writing artifacts outside output directoryCVE-2026-14967Fix available3.1 Low
- black lantern security bbotSymlink guard bypass in unarchive module allows planting symlinks during extractionCVE-2026-14966Fix available3.1 Low
- black lantern security bbotArbitrary File Write in postman_download moduleCVE-2026-12568Fix available6.5 Medium
- black lantern security bbotSymlink-following arbitrary write via github_workflows moduleCVE-2026-12567Fix available2.2 Low
- black lantern security bbotSSRF via unvalidated WWW-Authenticate realm in docker_pull moduleCVE-2026-12566Fix available3.1 Low
- black lantern security bbotPath Traversal (Zip-Slip) in unarchive moduleCVE-2026-12565Fix available5.3 Medium
- blsops, llc bbotImproper Archive Extraction in unarchive Enables RCECVE-2025-10284Fix available9.6 Critical
- blsops, llc bbotImproper .git Sanitization in gitdumper Enables RCECVE-2025-10283Fix available9.6 Critical
- blsops, llc bbotGitLab Domain Confusion in gitlab Leaks API KeyCVE-2025-10282Fix available4.7 Medium
- blsops, llc bbotInsecure URL Handling in git_clone Leading to Leaked API KeyCVE-2025-10281Fix available4.7 Medium