BBlack Lantern Security

Products

Exploited and recent CVEs

• CVE-2026-14967 Low 3.1 Path traversal in github_workflows allows writing artifacts outside output directory 0.3%
• CVE-2026-14966 Low 3.1 Symlink guard bypass in unarchive module allows planting symlinks during extraction 0.4%
• CVE-2026-12568 Medium 6.5 Arbitrary File Write in postman_download module 0.3%
• CVE-2026-12567 Low 2.2 Symlink-following arbitrary write via github_workflows module <0.1%
• CVE-2026-12566 Low 3.1 SSRF via unvalidated WWW-Authenticate realm in docker_pull module 0.2%
• CVE-2026-12565 Medium 5.3 Path Traversal (Zip-Slip) in unarchive module 0.2%