CVE-2026-32274 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. Th…
High CVSS: 8.7

CVE-2026-32274

Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file system locations. Fixed in Black 26.3.1.
Vendor
Python
Product
Black
CWE
CWE-22
Yayın Tarihi
2026-03-12 20:16:06
Güncelleme
2026-03-18 14:12:39
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

Referanslar