Threats tagged 'ghsa-fhw8-8v9p-7jp7'

Multiple vulnerabilities in bbot's unarchive.py component allow a malicious webserver to cause arbitrary file writes, enabling remote code execution (RCE) on the scanning user's system. This affects bbot versions prior to 2.7.0. The issue has been assigned CVE-2025-10284 and is rated critical with a CVSS score of 9.6. A fix is available in version 2.7.0.