cve.bz

CVE-2025-10283

9.6 criticalEPSS 0.5%

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

CVSS 3.1
9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS
0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-25)
CWE
CWE-22
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-h6m2-r6h9-4c44PyPIbbot<2.7.02.7.0
PYSEC-2026-293PyPIbbot<2.7.02.7.0

References

Check your stackJSON