bbot vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-12567Lowbbot: BBOT: Symlink-Following Arbitrary Write via github_workflows Module CVE-2026-12568Mediumbbot: BBOT: Arbitrary File Write in postman_download Module CVE-2026-12566Lowbbot: BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing CVE-2026-12565Mediumbbot: BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284 CVE-2025-10282Mediumbbot: BBOT's gitlab.py exposes globally configured "gitlab" API key CVE-2025-10283Criticalbbot: BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE CVE-2025-10281Mediumbbot: BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver CVE-2025-10284Criticalbbot: BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo