Psf Black vulnerabilities

CVE-2026-31900 [CRITICAL] CWE-20 CVE-2026-31900: Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting cod Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could

CVE-2026-32274 [HIGH] CWE-22 CVE-2026-32274: Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the n Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary fi