CyberSecBulletin

OWASP-BLT vulnerabilities

We track 2 vulnerabilities in OWASP-BLT products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 11, 2026.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest OWASP-BLT vulnerabilities

  • 8.8 High severity

    BLT: Improper Control of Generation of Code

    CVE-2026-42603OWASP-BLT

    OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Prior to 2.1.2, .github/workflows/pre-commit-fix.yaml uses pull_request_target (privileged trigger) but checks out and executes code di

  • 8.8 High severity

    BLT: Improper Control of Generation of Code

    CVE-2026-40316OWASP-BLT

    OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Versions prior to 2.1.1 contain an RCE vulnerability in the .github/workflows/regenerate-migrations.yml workflow. The workflow uses the