Is bbot safe ? 9 known vulnerabilities, worst severity CRITICAL.
// reach 45 direct dependencies
22 carry known advisories, worst CRITICAL
0 packages depend on it
an advisory here reaches each of them
// ai model usage No published models are known to use this package.
cvss CVSS v3.1 base score out of 10
epss chance of exploitation in 30 days, 42nd percentile of all CVEs
xyz score CyberXYZ composite out of 10
fig. 01 — GHSA-h6m2-r6h9-4c44, the advisory selected below
// 9 advisories GHSA-h6m2-r6h9-4c44 bbot's gitdumper.py insufficiently sanitises a .git/config file, leading to Remote Code Execution (RCE). CRIT GHSA-fhw8-8v9p-7jp7 Various issues in bbot's unarchive.py allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE). CRIT GHSA-m54h-vhf9-3w3m The postman_download module uses the workspace name field from the Postman API to construct the local directory path without sanitization. If a malicious workspace has a name containing path traversal characters, pathlib resolves the path outside the intended output directory, allowing an attacker to write arbitrary files to the user's system. MODE GHSA-3vgw-585j-4m45 The unarchive internal module's archive extraction commands perform no code-level validation on extracted file paths, relying entirely on the behavior of external tools (e.g. GNU tar) which varies by platform. While CVE-2025-10284 addressed git-specific RCE vectors, the underlying archive extraction path traversal was never fixed. On systems with GNU tar < 1.34 (Ubuntu 20.04, Debian Buster, CentOS MODE GHSA-p3v4-c93g-cmhw bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. MODE GHSA-63wh-p5fx-h4vc Due to unsafe URL handling, bbot's git_clone.py can be made to leak a user's github.com API key to an attacker-controlled webserver. MODE GHSA-xpf3-p7gm-7756 BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted during a scan (for example via filedownload), bypassed the guard and caused an attacker-controlled symlink LOW GHSA-rvp7-w75q-9fv2 The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing workflow data to be written to an attacker-chosen location. LOW GHSA-3mp7-vp6j-2mxx The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry could modify this header to redirect the authentication request to an arbitrary endpoint, potentially leaking authentication tokens. LOW // summary bbot's gitdumper.py insufficiently sanitises a .git/config file, leading to Remote Code Execution (RCE).
bbot's gitdumper.py can be made to consume a malicious .git/index file, leading to arbitrary file write which can be used to achieve Remote Code Execution (RCE).
// impact A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.
// cvss v3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Scope Changed
Confidentiality High
Integrity High
Availability High Checked 2026-11-06 at 22:30 UTC. The most recent advisory here was published 2026-10-14. Updated continuously from NVD, GHSA, OSV and CNA feeds.
Think a verdict here is wrong? Tell us — we respond within 2 business days. Report an issue with this page