PYSEC-2024-48

🗓️ 19 Mar 2024 05:15:00Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 6 Views

Black before 24.3.0 is vulnerable to regular expression denial of service via lines_with_leading_tabs_expanded.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: Vulnerability in Python Software Foundation Black ( CVE-2024-21503) may affect IBM watsonx Assistant for IBM Cloud Pak for Data	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability inPython Software Foundation Black affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	13 Mar 202517:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python Software Foundation Black ( CVE-2024-21503) may affect IBM watsonx Assistant for IBM Cloud Pak for Data	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in Cloudera Base on premises Cloudera Runtime 7.3.1.700 SP3 CHF 2	9 Mar 202617:07	–	ibm
AlpineLinux	CVE-2024-21503	19 Mar 202405:00	–	alpinelinux
BDU FSTEC	The vulnerability of the lines_with_leading_tabs_expanded() function in the strings.py file of the Python coding formatting tool Black allows a attacker to cause a service failure.	1 Apr 202400:00	–	bdu_fstec
Chainguard	CVE-2024-21503 vulnerabilities	22 Mar 202516:12	–	cgr
Circl	CVE-2024-21503	19 Mar 202406:26	–	circl
CNNVD	black Security breach	19 Mar 202400:00	–	cnnvd
CVE	CVE-2024-21503	19 Mar 202405:00	–	cve

Vulners

Node

psf blackRange0–24.3.0

Source	Link
security	www.security.snyk.io/vuln/SNYK-PYTHON-BLACK-6256273
github	www.github.com/psf/black/releases/tag/24.3.0
github	www.github.com/psf/black/commit/f00093672628d212b8965a8993cee8bedf5fe9b8
github	www.github.com/advisories/GHSA-fj7x-q9j7-g6q6

19 Mar 2024 11:18Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.3

EPSS0.00971

SSVC