https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:13:00 +0000 https://cve.radiocsirt.org/vuln/brew-ansible-lint-cve-2026-31900 <p><strong>Affected:</strong> Homebrew: ansible-lint</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> <p><strong>Affected:</strong> Homebrew: ansible-lint</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/brew-ansible-lint-cve-2026-31900 https://cve.radiocsirt.org/vuln/cleanstart-2026-dv70312 <p><strong>Affected:</strong> CleanStart: kserve-storage-controller</p> <p>Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: kserve-storage-controller</p> <p>Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-dv70312 https://cve.radiocsirt.org/vuln/euvd-2026-275936 EUVD-2026-275936 https://cve.radiocsirt.org/vuln/euvd-2026-275936 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31900 <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31900 https://cve.radiocsirt.org/vuln/ghsa-v53h-f6m7-xcgm <p><strong>Affected:</strong> GitHub Actions: psf/black</p> <p>### Impact</p> <p>Black provides a [GitHub action](https://black.readthedocs.io/en/stable/integrations/github_actions.html) for formatting code. This action supports an option, `use_pyproject: true`, for reading the version of Black to use from the repository `pyproject.toml`. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action.</p> <p>### Patches</p> <p>Version 26.3.0 fixes this vulnerability by tightening the validation of the `version` field. Users who use the GitHub Action as `psf/black@stable` will automatically pick up this update.</p> <p>### Workarounds</p> <p>Do not use the `use_pyproject: true` option in the psf/black GitHub Action.</p> <p><strong>Affected:</strong> GitHub Actions: psf/black</p> <p>### Impact</p> <p>Black provides a [GitHub action](https://black.readthedocs.io/en/stable/integrations/github_actions.html) for formatting code. This action supports an option, `use_pyproject: true`, for reading the version of Black to use from the repository `pyproject.toml`. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action.</p> <p>### Patches</p> <p>Version 26.3.0 fixes this vulnerability by tightening the validation of the `version` field. Users who use the GitHub Action as `psf/black@stable` will automatically pick up this update.</p> <p>### Workarounds</p> <p>Do not use the `use_pyproject: true` option in the psf/black GitHub Action.</p> https://cve.radiocsirt.org/vuln/ghsa-v53h-f6m7-xcgm https://cve.radiocsirt.org/vuln/opensuse-su-2026:10372-1 <p>python311-black-26.3.1-1.1 on GA media</p> <p>python311-black-26.3.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10372-1 https://cve.radiocsirt.org/vuln/pysec-2026-2120 <p><strong>Affected:</strong> PyPI: black</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> <p><strong>Affected:</strong> PyPI: black</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2120 https://cve.radiocsirt.org/vuln/suse-su-2026:20928-1 <p>Security update for python-black</p> <p>Security update for python-black</p> https://cve.radiocsirt.org/vuln/suse-su-2026:20928-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31900 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: black, Ubuntu:22.04:LTS: black, Ubuntu:24.04:LTS: black, Ubuntu:25.10: black, Ubuntu:26.04:LTS: black</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: black, Ubuntu:22.04:LTS: black, Ubuntu:24.04:LTS: black, Ubuntu:25.10: black, Ubuntu:26.04:LTS: black</p> <p>Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31900 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046 <p>Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM Concert ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3046