https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:56:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02397 bdu:2024-02397 https://cve.radiocsirt.org/vuln/bdu:2024-02397 https://cve.radiocsirt.org/vuln/brew-ansible-lint-cve-2024-21503 <p><strong>Affected:</strong> Homebrew: ansible-lint</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.</p> <p>Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> <p><strong>Affected:</strong> Homebrew: ansible-lint</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.</p> <p>Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> https://cve.radiocsirt.org/vuln/brew-ansible-lint-cve-2024-21503 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366 certfr-2024-avi-0366 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366 https://cve.radiocsirt.org/vuln/cleanstart-2024-en29810 <p><strong>Affected:</strong> CleanStart: black</p> <p>Security vulnerability affects the black package. Versions of the package black before 24.</p> <p><strong>Affected:</strong> CleanStart: black</p> <p>Security vulnerability affects the black package. Versions of the package black before 24.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-en29810 https://cve.radiocsirt.org/vuln/euvd-2026-3841 EUVD-2026-3841 https://cve.radiocsirt.org/vuln/euvd-2026-3841 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21503 <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21503 https://cve.radiocsirt.org/vuln/ghsa-fj7x-q9j7-g6q6 <p><strong>Affected:</strong> PyPI: black</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.</p> <p>Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> <p><strong>Affected:</strong> PyPI: black</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service.</p> <p>Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> https://cve.radiocsirt.org/vuln/ghsa-fj7x-q9j7-g6q6 https://cve.radiocsirt.org/vuln/gsd-2024-21503 gsd-2024-21503 https://cve.radiocsirt.org/vuln/gsd-2024-21503 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13783-1 <p>python310-black-24.3.0-1.1 on GA media</p> <p>python310-black-24.3.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13783-1 https://cve.radiocsirt.org/vuln/pysec-2024-48 <p><strong>Affected:</strong> PyPI: black</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> <p><strong>Affected:</strong> PyPI: black</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> https://cve.radiocsirt.org/vuln/pysec-2024-48 https://cve.radiocsirt.org/vuln/rhsa-2024:3781 <p>pip: Mercurial configuration injectable in repo revision when installing via pip golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm python-cryptography: NULL-dereference when loading PKCS7 certificates pillow: Arbitrary Code Execution via the environment parameter python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() python-pydantic: regular expression denial of service via crafted email string sqlparse: parsing heavily nested list leads to denial of service psf/black: ReDoS via the lines_with_leading_tabs_expanded() function in strings.py file golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override aiohttp: XSS on index pages for static file handling python-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words() python-pillow: buffer overflow in _imagingcms.c follow-redirects: Possible credential leak aiohttp: DoS when trying to parse malformed POST requests python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django jinja2: accept…</p> <p>pip: Mercurial configuration injectable in repo revision when installing via pip golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm python-cryptography: NULL-dereference when loading PKCS7 certificates pillow: Arbitrary Code Execution via the environment parameter python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() python-pydantic: regular expression denial of service via crafted email string sqlparse: parsing heavily nested list leads to denial of service psf/black: ReDoS via the lines_with_leading_tabs_expanded() function in strings.py file golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override aiohttp: XSS on index pages for static file handling python-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words() python-pillow: buffer overflow in _imagingcms.c follow-redirects: Possible credential leak aiohttp: DoS when trying to parse malformed POST requests python-social-auth: Improper Handling of Case Sensitivity in social-auth-app-django jinja2: accept…</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3781 https://cve.radiocsirt.org/vuln/suse-su-2024:2481-1 <p>Security update for python-black</p> <p>Security update for python-black</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2481-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21503 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: black, Ubuntu:22.04:LTS: black, Ubuntu:24.04:LTS: black, Ubuntu:25.10: black, Ubuntu:26.04:LTS: black</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: black, Ubuntu:22.04:LTS: black, Ubuntu:24.04:LTS: black, Ubuntu:25.10: black, Ubuntu:26.04:LTS: black</p> <p>Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file. An attacker could exploit this vulnerability by crafting a malicious input that causes a denial of service. Exploiting this vulnerability is possible when running Black on untrusted input, or if you habitually put thousands of leading tab characters in your docstrings.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21503 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1328 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand erzeugen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand erzeugen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1328