Read the docs
TI-2026-12601 Aliases CVE-2026-14966GHSA-xpf3-p7gm-7756

Symlink guard bypass in unarchive module allows planting symlinks during extraction

Priority LOW 15CWE-59Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted during a scan (for example via filedownload), bypassed the guard and caused an attacker-controlled symlink to be written into the extraction directory. The effect is limited to planting the symlink (its target is not written through), and only hosts using such a legacy p7zip build are affected; current mainline 7-Zip is not.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00384 32nd percentileScored 2026-11-07
Fix Fixed bbot (PyPI): 3.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Black Lantern SecurityBBOT2.3.1 – 2.8.6—No fix listedCNA
—bbot (PyPI)2.3.1 to before 3.0.03.0.0Patch availableGHSA-xpf3-p7gm-7756
  • BBOT VendorBlack Lantern Security Affected 2.3.1 – 2.8.6 Fixed in — No fix listed CNA
  • bbot (PyPI) Vendor— Affected 2.3.1 to before 3.0.0 Fixed in 3.0.0 Patch available GHSA-xpf3-p7gm-7756

CPE configurations NVD · 63

CPEVersionsRoleVendor
cpe:2.3:a:blacklanternsecurity:bbot:*:*:*:*:*:*:*:*2.3.1 – 2.8.6VulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.0:rc:*:*:*:*:*:*3.0.0.0 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.647:rc:*:*:*:*:*:*3.0.0.647 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.649:rc:*:*:*:*:*:*3.0.0.649 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.652:rc:*:*:*:*:*:*3.0.0.652 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.654:rc:*:*:*:*:*:*3.0.0.654 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.659:rc:*:*:*:*:*:*3.0.0.659 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.669:rc:*:*:*:*:*:*3.0.0.669 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.671:rc:*:*:*:*:*:*3.0.0.671 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.673:rc:*:*:*:*:*:*3.0.0.673 rcVulnerableBlack Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:*:*:*:*:*:*:*:* Versions 2.3.1 – 2.8.6 Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.0:rc:*:*:*:*:*:* Versions 3.0.0.0 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.647:rc:*:*:*:*:*:* Versions 3.0.0.647 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.649:rc:*:*:*:*:*:* Versions 3.0.0.649 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.652:rc:*:*:*:*:*:* Versions 3.0.0.652 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.654:rc:*:*:*:*:*:* Versions 3.0.0.654 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.659:rc:*:*:*:*:*:* Versions 3.0.0.659 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.669:rc:*:*:*:*:*:* Versions 3.0.0.669 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.671:rc:*:*:*:*:*:* Versions 3.0.0.671 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.673:rc:*:*:*:*:*:* Versions 3.0.0.673 rc Vulnerable ·Black Lantern Security
Show 53 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.691:rc:*:*:*:*:*:*3.0.0.691 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.765:rc:*:*:*:*:*:*3.0.0.765 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.767:rc:*:*:*:*:*:*3.0.0.767 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.773:rc:*:*:*:*:*:*3.0.0.773 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.782:rc:*:*:*:*:*:*3.0.0.782 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.786:rc:*:*:*:*:*:*3.0.0.786 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.793:rc:*:*:*:*:*:*3.0.0.793 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.795:rc:*:*:*:*:*:*3.0.0.795 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.798:rc:*:*:*:*:*:*3.0.0.798 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.819:rc:*:*:*:*:*:*3.0.0.819 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.821:rc:*:*:*:*:*:*3.0.0.821 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.829:rc:*:*:*:*:*:*3.0.0.829 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.836:rc:*:*:*:*:*:*3.0.0.836 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.849:rc:*:*:*:*:*:*3.0.0.849 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.851:rc:*:*:*:*:*:*3.0.0.851 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.858:rc:*:*:*:*:*:*3.0.0.858 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.870:rc:*:*:*:*:*:*3.0.0.870 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.876:rc:*:*:*:*:*:*3.0.0.876 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.884:rc:*:*:*:*:*:*3.0.0.884 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.897:rc:*:*:*:*:*:*3.0.0.897 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.903:rc:*:*:*:*:*:*3.0.0.903 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.907:rc:*:*:*:*:*:*3.0.0.907 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.909:rc:*:*:*:*:*:*3.0.0.909 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.981:rc:*:*:*:*:*:*3.0.0.981 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.986:rc:*:*:*:*:*:*3.0.0.986 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1056:rc:*:*:*:*:*:*3.0.0.1056 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1062:rc:*:*:*:*:*:*3.0.0.1062 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1064:rc:*:*:*:*:*:*3.0.0.1064 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1068:rc:*:*:*:*:*:*3.0.0.1068 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1070:rc:*:*:*:*:*:*3.0.0.1070 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1079:rc:*:*:*:*:*:*3.0.0.1079 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1137:rc:*:*:*:*:*:*3.0.0.1137 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1139:rc:*:*:*:*:*:*3.0.0.1139 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1141:rc:*:*:*:*:*:*3.0.0.1141 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1153:rc:*:*:*:*:*:*3.0.0.1153 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1173:rc:*:*:*:*:*:*3.0.0.1173 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1184:rc:*:*:*:*:*:*3.0.0.1184 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1190:rc:*:*:*:*:*:*3.0.0.1190 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1254:rc:*:*:*:*:*:*3.0.0.1254 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1271:rc:*:*:*:*:*:*3.0.0.1271 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1274:rc:*:*:*:*:*:*3.0.0.1274 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1304:rc:*:*:*:*:*:*3.0.0.1304 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1313:rc:*:*:*:*:*:*3.0.0.1313 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1317:rc:*:*:*:*:*:*3.0.0.1317 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1333:rc:*:*:*:*:*:*3.0.0.1333 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1343:rc:*:*:*:*:*:*3.0.0.1343 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1345:rc:*:*:*:*:*:*3.0.0.1345 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1349:rc:*:*:*:*:*:*3.0.0.1349 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1386:rc:*:*:*:*:*:*3.0.0.1386 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1388:rc:*:*:*:*:*:*3.0.0.1388 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1390:rc:*:*:*:*:*:*3.0.0.1390 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1401:rc:*:*:*:*:*:*3.0.0.1401 rcVulnerableBlack Lantern Security
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1407:rc:*:*:*:*:*:*3.0.0.1407 rcVulnerableBlack Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.691:rc:*:*:*:*:*:* Versions 3.0.0.691 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.765:rc:*:*:*:*:*:* Versions 3.0.0.765 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.767:rc:*:*:*:*:*:* Versions 3.0.0.767 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.773:rc:*:*:*:*:*:* Versions 3.0.0.773 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.782:rc:*:*:*:*:*:* Versions 3.0.0.782 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.786:rc:*:*:*:*:*:* Versions 3.0.0.786 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.793:rc:*:*:*:*:*:* Versions 3.0.0.793 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.795:rc:*:*:*:*:*:* Versions 3.0.0.795 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.798:rc:*:*:*:*:*:* Versions 3.0.0.798 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.819:rc:*:*:*:*:*:* Versions 3.0.0.819 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.821:rc:*:*:*:*:*:* Versions 3.0.0.821 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.829:rc:*:*:*:*:*:* Versions 3.0.0.829 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.836:rc:*:*:*:*:*:* Versions 3.0.0.836 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.849:rc:*:*:*:*:*:* Versions 3.0.0.849 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.851:rc:*:*:*:*:*:* Versions 3.0.0.851 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.858:rc:*:*:*:*:*:* Versions 3.0.0.858 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.870:rc:*:*:*:*:*:* Versions 3.0.0.870 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.876:rc:*:*:*:*:*:* Versions 3.0.0.876 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.884:rc:*:*:*:*:*:* Versions 3.0.0.884 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.897:rc:*:*:*:*:*:* Versions 3.0.0.897 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.903:rc:*:*:*:*:*:* Versions 3.0.0.903 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.907:rc:*:*:*:*:*:* Versions 3.0.0.907 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.909:rc:*:*:*:*:*:* Versions 3.0.0.909 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.981:rc:*:*:*:*:*:* Versions 3.0.0.981 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.986:rc:*:*:*:*:*:* Versions 3.0.0.986 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1056:rc:*:*:*:*:*:* Versions 3.0.0.1056 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1062:rc:*:*:*:*:*:* Versions 3.0.0.1062 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1064:rc:*:*:*:*:*:* Versions 3.0.0.1064 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1068:rc:*:*:*:*:*:* Versions 3.0.0.1068 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1070:rc:*:*:*:*:*:* Versions 3.0.0.1070 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1079:rc:*:*:*:*:*:* Versions 3.0.0.1079 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1137:rc:*:*:*:*:*:* Versions 3.0.0.1137 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1139:rc:*:*:*:*:*:* Versions 3.0.0.1139 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1141:rc:*:*:*:*:*:* Versions 3.0.0.1141 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1153:rc:*:*:*:*:*:* Versions 3.0.0.1153 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1173:rc:*:*:*:*:*:* Versions 3.0.0.1173 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1184:rc:*:*:*:*:*:* Versions 3.0.0.1184 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1190:rc:*:*:*:*:*:* Versions 3.0.0.1190 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1254:rc:*:*:*:*:*:* Versions 3.0.0.1254 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1271:rc:*:*:*:*:*:* Versions 3.0.0.1271 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1274:rc:*:*:*:*:*:* Versions 3.0.0.1274 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1304:rc:*:*:*:*:*:* Versions 3.0.0.1304 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1313:rc:*:*:*:*:*:* Versions 3.0.0.1313 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1317:rc:*:*:*:*:*:* Versions 3.0.0.1317 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1333:rc:*:*:*:*:*:* Versions 3.0.0.1333 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1343:rc:*:*:*:*:*:* Versions 3.0.0.1343 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1345:rc:*:*:*:*:*:* Versions 3.0.0.1345 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1349:rc:*:*:*:*:*:* Versions 3.0.0.1349 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1386:rc:*:*:*:*:*:* Versions 3.0.0.1386 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1388:rc:*:*:*:*:*:* Versions 3.0.0.1388 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1390:rc:*:*:*:*:*:* Versions 3.0.0.1390 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1401:rc:*:*:*:*:*:* Versions 3.0.0.1401 rc Vulnerable ·Black Lantern Security
  • cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1407:rc:*:*:*:*:*:* Versions 3.0.0.1407 rc Vulnerable ·Black Lantern Security

Remediation

  • Fix · GHSA-xpf3-p7gm-7756 bbot (PyPI) Fixed in 3.0.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-14966
  2. 2026-10-15 Alias added: GHSA-xpf3-p7gm-7756
  3. 2026-10-15 Fix available: PyPI/[email protected] · GHSA-xpf3-p7gm-7756
  4. 2026-10-15 CVSS score added · GHSA-xpf3-p7gm-7756
  5. 2026-10-15 Weakness changed · GHSA-xpf3-p7gm-7756
  6. 2026-10-15 6 new references · GHSA-xpf3-p7gm-7756

References

Patch 1

Advisory 1

Other 4

  • TI-2026-12602 Path traversal in github_workflows allows writing artifacts outside output directory CVSS 3.1LOW 3.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences