Executive brief
BBOT's gitlab.py exposes globally configured "gitlab" API key
Affected products
- PyPI bbot
Junglewise Threat Intelligence
CVE-2025-10282: PYSEC-2026-1217 - BBOT's gitlab.py exposes globally configured "gitlab" API key
CVE-2025-10282 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: bbot (PyPI). Vendors: PyPI.
Related threats
- Black Lantern Security BBOT path traversal in github_workflows module
- Black Lantern Security BBOT symbolic link bypass in unarchive module
- PYSEC-2026-292 - BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
- PYSEC-2026-293 - BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE
- Black Lantern Security BBOT path traversal in postman_download module