PyPI/bbot CVE-2026-12568: medium 6.5, EPSS 0.25%

BBOT: Arbitrary File Write in postman_download Module

Action: Upgrade bbot to 2.8.6 or later.

pip install bbot==2.8.6

Affected

Fixed versions

Sources

• osv: GHSA-m54h-vhf9-3w3m
• https://github.com/blacklanternsecurity/bbot/security/advisories/GHSA-m54h-vhf9-3w3m
• https://nvd.nist.gov/vuln/detail/CVE-2026-12568
• https://github.com/blacklanternsecurity/bbot/commit/36bc20818
• https://github.com/blacklanternsecurity/bbot

CVE-2026-12568 · published 2026-06-18T15:03:38Z · modified 2026-07-13T16:43:14.738920730Z · JSON