Lucene search
+L

CVE-2026-14967

🗓️ 08 Jul 2026 15:03:50Reported by BLSOPSType 
cve
 cve
🔗 web.nvd.nist.gov👁 27 Views

CVE-2026-14967: github_workflows path traversal writes artifacts two levels above the output directory via CODE_REPOSITORY URL.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2026-14967
8 Jul 202615:03
attackerkb
cvelist
Cvelist
CVE-2026-14967 Path traversal in github_workflows allows writing artifacts outside output directory
8 Jul 202615:03
cvelist
euvd
EUVD
EUVD-2026-42296
8 Jul 202615:03
euvd
nvd
NVD
CVE-2026-14967
8 Jul 202616:16
nvd
osv
OSV
PYSEC-2026-3720
8 Jul 202616:16
osv
ptsecurity
Positive Technologies
PT-2026-56472
8 Jul 202600:00
ptsecurity
pypa
PyPA
PYSEC-0000-CVE-2026-14967
8 Jul 202616:16
pypa
pypa
PyPA
PYSEC-2026-3720
8 Jul 202616:16
pypa
snyk
Snyk
Directory Traversal
8 Jul 202618:47
snyk
vulnrichment
Vulnrichment
CVE-2026-14967 Path traversal in github_workflows allows writing artifacts outside output directory
8 Jul 202615:03
vulnrichment
NVD
Node
OR
blacklanternsecuritybbotRange1.1.72.8.6
blacklanternsecuritybbotMatch3.0.0.647rc
blacklanternsecuritybbotMatch3.0.0.649rc
blacklanternsecuritybbotMatch3.0.0.652rc
blacklanternsecuritybbotMatch3.0.0.654rc
blacklanternsecuritybbotMatch3.0.0.659rc
blacklanternsecuritybbotMatch3.0.0.669rc
blacklanternsecuritybbotMatch3.0.0.671rc
blacklanternsecuritybbotMatch3.0.0.673rc
blacklanternsecuritybbotMatch3.0.0.691rc
blacklanternsecuritybbotMatch3.0.0.765rc
blacklanternsecuritybbotMatch3.0.0.767rc
blacklanternsecuritybbotMatch3.0.0.773rc
blacklanternsecuritybbotMatch3.0.0.782rc
blacklanternsecuritybbotMatch3.0.0.786rc
blacklanternsecuritybbotMatch3.0.0.793rc
blacklanternsecuritybbotMatch3.0.0.795rc
blacklanternsecuritybbotMatch3.0.0.798rc
blacklanternsecuritybbotMatch3.0.0.819rc
blacklanternsecuritybbotMatch3.0.0.821rc
blacklanternsecuritybbotMatch3.0.0.829rc
blacklanternsecuritybbotMatch3.0.0.836rc
blacklanternsecuritybbotMatch3.0.0.849rc
blacklanternsecuritybbotMatch3.0.0.851rc
blacklanternsecuritybbotMatch3.0.0.858rc
blacklanternsecuritybbotMatch3.0.0.870rc
blacklanternsecuritybbotMatch3.0.0.876rc
blacklanternsecuritybbotMatch3.0.0.884rc
blacklanternsecuritybbotMatch3.0.0.897rc
blacklanternsecuritybbotMatch3.0.0.903rc
blacklanternsecuritybbotMatch3.0.0.907rc
blacklanternsecuritybbotMatch3.0.0.909rc
blacklanternsecuritybbotMatch3.0.0.981rc
blacklanternsecuritybbotMatch3.0.0.986rc
blacklanternsecuritybbotMatch3.0.0.1056rc
blacklanternsecuritybbotMatch3.0.0.1062rc
blacklanternsecuritybbotMatch3.0.0.1064rc
blacklanternsecuritybbotMatch3.0.0.1068rc
blacklanternsecuritybbotMatch3.0.0.1070rc
blacklanternsecuritybbotMatch3.0.0.1079rc
blacklanternsecuritybbotMatch3.0.0.1137rc
blacklanternsecuritybbotMatch3.0.0.1139rc
blacklanternsecuritybbotMatch3.0.0.1141rc
blacklanternsecuritybbotMatch3.0.0.1153rc
blacklanternsecuritybbotMatch3.0.0.1173rc
blacklanternsecuritybbotMatch3.0.0.1184rc
blacklanternsecuritybbotMatch3.0.0.1190rc
blacklanternsecuritybbotMatch3.0.0.1254rc
blacklanternsecuritybbotMatch3.0.0.1271rc
blacklanternsecuritybbotMatch3.0.0.1274rc
blacklanternsecuritybbotMatch3.0.0.1304rc
blacklanternsecuritybbotMatch3.0.0.1313rc
blacklanternsecuritybbotMatch3.0.0.1317rc
blacklanternsecuritybbotMatch3.0.0.1333rc
blacklanternsecuritybbotMatch3.0.0.1343rc
blacklanternsecuritybbotMatch3.0.0.1345rc
blacklanternsecuritybbotMatch3.0.0.1349rc
blacklanternsecuritybbotMatch3.0.0.1386rc
blacklanternsecuritybbotMatch3.0.0.1388rc
blacklanternsecuritybbotMatch3.0.0.1390rc
blacklanternsecuritybbotMatch3.0.0.1401rc
blacklanternsecuritybbotMatch3.0.0.1407rc
[
  {
    "defaultStatus": "unaffected",
    "product": "BBOT",
    "repo": "https://github.com/blacklanternsecurity/bbot",
    "vendor": "Black Lantern Security",
    "versions": [
      {
        "lessThanOrEqual": "2.8.6",
        "status": "affected",
        "version": "1.1.7",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Aug 2026 17:27Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.13.1
EPSS0.00261
SSVC
27