Threats tagged 'brew-bbot-cve-2025-10283'

bbot's gitdumper.py component insufficiently sanitizes the .git/config and .git/index files, allowing a maliciously crafted repository to trigger arbitrary file writes and remote code execution (RCE) on the scanning user's system. This vulnerability affects bbot versions from 1.0.5.1665 up to but not including 2.7.0. A patch is available in version 2.7.0 to address this critical security flaw.