Blacklanternsecurity

**Name of the Vulnerable Software and Affected Versions** bbot (affected versions not specified) **Description** The `docker pull` module fails to validate the `realm` parameter received from a Docker registry's WWW-Authenticate response header when using it as the authentication endpoint. A man-in-the-middle attacker positioned between bbot and a Docker registry could modify this header to redirect authentication requests to an arbitrary endpoint, which may lead to the leakage of authentication tokens. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** github workflows (affected versions not specified) **Description** The github workflows module constructs local directory paths using repository names provided by the user without validating for symlinks. A local attacker with access to the scan directory can place a symlink at the predictable output path, which leads to workflow data being written to a location chosen by the attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Postman Download Module (affected versions not specified) **Description** The `postman download` module fails to sanitize the workspace name field retrieved from the Postman API when constructing local directory paths. A malicious workspace name containing path traversal characters—a technique used to access files and directories outside the intended folder—allows the `pathlib` library to resolve paths outside the designated output directory, enabling an attacker to write arbitrary files to the user's system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.