OWASP-BLT
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BLT | 2 | – | May 11, 2026 |
Exploited and recent CVEs
- CVE-2026-42603 OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target 0.2%
- CVE-2026-40316 OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow 0.4%