OWASP-BLT BLT

• CVE-2026-42603 High 8.8 OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target 0.2%
• CVE-2026-40316 High 8.8 OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow 0.4%