CVE-2024-21503

🗓️ 19 Mar 2024 05:00:01Reported by snykType

Versions of Black package before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in strings.py, allowing an attacker to cause denial of service

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: Vulnerability in Python Software Foundation Black ( CVE-2024-21503) may affect IBM watsonx Assistant for IBM Cloud Pak for Data	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability inPython Software Foundation Black affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	13 Mar 202517:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python Software Foundation Black ( CVE-2024-21503) may affect IBM watsonx Assistant for IBM Cloud Pak for Data	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in Cloudera Base on premises Cloudera Runtime 7.3.1.700 SP3 CHF 2	9 Mar 202617:07	–	ibm
AlpineLinux	CVE-2024-21503	19 Mar 202405:00	–	alpinelinux
BDU FSTEC	The vulnerability of the lines_with_leading_tabs_expanded() function in the strings.py file of the Python coding formatting tool Black allows a attacker to cause a service failure.	1 Apr 202400:00	–	bdu_fstec
Chainguard	CVE-2024-21503 vulnerabilities	22 Mar 202516:12	–	cgr
Circl	CVE-2024-21503	19 Mar 202406:26	–	circl
CNNVD	black Security breach	19 Mar 202400:00	–	cnnvd
CVE	CVE-2024-21503	19 Mar 202405:00	–	cve

[
  {
    "product": "black",
    "versions": [
      {
        "version": "0",
        "lessThan": "24.3.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]

Source	Link
security	www.security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273
github	www.github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8
github	www.github.com/psf/black/releases/tag/24.3.0

19 Mar 2024 05:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.3

EPSS0.00971