BLT vulnerabilities

2 known vulnerabilities in BLT from OWASP-BLT. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  BLT: Improper Control of Generation of Code

  CVE-2026-42603May 11, 2026OWASP-BLT

  OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Prior to 2.1.2, .github/workflows/pre-commit-fix.yaml uses pull_request_target (privileged trigger) but checks out and executes code di

• 8.8 High severity

  BLT: Improper Control of Generation of Code

  CVE-2026-40316Apr 15, 2026OWASP-BLT

  OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Versions prior to 2.1.1 contain an RCE vulnerability in the .github/workflows/regenerate-migrations.yml workflow. The workflow uses the