Ecosystem	Package	Version

Vulnerabilities

CVE-2025-10283

CVE-2025-10283

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

Published Oct 10, 2025

https://github.com/advisories/GHSA-h6m2-r6h9-4c44

CVSS ScoreHigh

8.6

Ecosystem	Package	Version


pypi	bbot	2.3.2.5927rc0
pypi	bbot	2.3.2.5938rc0
pypi	bbot	2.3.2.5942rc0
pypi	bbot	2.3.2.5944rc0
pypi	bbot	2.3.2.5950rc0
pypi	bbot	2.3.2.5958rc0
pypi	bbot	2.3.2.5967rc0
pypi	bbot	2.3.2.5971rc0
pypi	bbot	2.4.0.5974rc0
pypi	bbot	2.4.0.5977rc0
pypi	bbot	2.4.0.5984rc0
pypi	bbot	2.4.0.5986rc0
pypi	bbot	2.4.0.5988rc0
pypi	bbot	2.4.0.5992rc0
pypi	bbot	2.4.0.5995rc0
pypi	bbot	2.4.0.5997rc0
pypi	bbot	2.4.0.5999rc0
pypi	bbot	2.4.0.6005rc0
pypi	bbot	2.4.0.6007rc0
pypi	bbot	2.4.0.6031rc0
pypi	bbot	2.4.0.6037rc0
pypi	bbot	2.4.0.6039rc0
pypi	bbot	2.4.0.6045rc0
pypi	bbot	2.4.0.6050rc0
pypi	bbot	2.4.0.6067rc0
pypi	bbot	2.4.0.6073rc0
pypi	bbot	2.4.0
pypi	bbot	2.4.1.6075rc0
pypi	bbot	2.4.1.6077rc0
pypi	bbot	2.4.1.6089rc0
pypi	bbot	2.4.1.6094rc0
pypi	bbot	2.4.1.6095rc0
pypi	bbot	2.4.1.6100rc0
pypi	bbot	2.4.1.6107rc0
pypi	bbot	2.4.1
pypi	bbot	2.4.2.6109rc0
pypi	bbot	2.4.2.6590rc0
pypi	bbot	2.4.2.6596rc0
pypi	bbot	2.4.2.6608rc0
pypi	bbot	2.4.2.6611rc0
pypi	bbot	2.4.2.6615rc0
pypi	bbot	2.4.2.6621rc0
pypi	bbot	2.4.2.6623rc0
pypi	bbot	2.4.2.6635rc0
pypi	bbot	2.4.2.6638rc0
pypi	bbot	2.4.2.6653rc0
pypi	bbot	2.4.2.6655rc0
pypi	bbot	2.4.2.6659rc0
pypi	bbot	2.4.2.6677rc0
pypi	bbot	2.4.2.6706rc0

CVE-2025-10283 | Components Impacted | Sonatype Guide | Sonatype Guide