CyberSecBulletin

Psf vulnerabilities

We track 3 vulnerabilities in Psf products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.

3vulnerabilities
1critical
2high
0exploited
8.7average CVSS score

Latest Psf vulnerabilities

  • 8.7 High severity

    black: Inclusion of Functionality from Untrusted Control Sphere

    CVE-2026-114134Psf

    Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with use_pyproject: true accepts tool.black.required-version from pyproject.toml without validating that it is a released Black version specifier. An attacker who can

  • 7.5 High severity

    black: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-32274Psf

    Black is the uncompromising Python code formatter. Starting in version 24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the

  • 9.8 Critical severity

    Black is the uncompromising Python code formatter.

    CVE-2026-31900Psf

    Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request cou