Owasp-blt Blt vulnerabilities

• owasp-blt blt OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target CVE-2026-42603 8.8 HighMay 11, 2026
• owasp blt OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow CVE-2026-40316 8.8 HighApril 15, 2026