What’s Vulnerable › Products

OWASP-BLT BLT vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your OWASP-BLT BLT version is affected

Latest OWASP-BLT BLT vulnerabilities

• CVE-2026-42603 — OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target (CVSS 8.8)
• CVE-2026-40316 — OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow (CVSS 8.8)