ROOT-APP-PYPI-CVE-2026-114134 CVE-2026-114134 in black - Patched by Root

Root has patched CVE-2026-114134 in the black package for Root:PyPI. Multiple fixed versions available...

white (>=0.0.4, <=0.1.0) potentially affected by CVE-2026-114134 via black (18.3.0a0)

black PYPI version 18.3.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - white =0.0.4, =0.1.0 Source cves: CVE-2026-114134 Source advisory: OSV:GHSA-CG8M-R9F2-5WM2...

featuren (0.1.0), pybana (0.1.0) potentially affected by CVE-2026-114134 via black (18.6.0b4)

black PYPI version 18.6.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - featuren 0.1.0 - pybana 0.1.0 Source cves: CVE-2026-114134 Source advisory: OSV:GHSA-CG8M-R9F2-5WM2...

airflow-windmill (>=0.0.2, <=0.0.4), autodeploy-tests (>=0.8.0, <=0.11.4) +22 more potentially affected by CVE-2026-114134 via black (18.9.0b0)

black PYPI version 18.9.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - airflow-windmill =0.0.2, =0.8.0, =0.1.5, =0.31.0, =0.1.0, =0.1.5, =0.0.0.dev3, =0.1.0, =0.2.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-114134...

ai-economist (>=1.0.0, <=1.1.1), aiae (>=0.1.2, <=1.0.2) +121 more potentially affected by CVE-2026-114134 via black (19.10.0b0)

black PYPI version 19.10.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ai-economist =1.0.0, =0.1.2, =0.1.0, =3.1.4, =0.1.1, =0.7.0, =0.1.0, =0.8.0, =0.5.0, =0.2.0, =0.2.1, =0.1.0, =0.5.1 and more Source cves:...

agilecode-test-tools (>=0.4.0, <=0.5.0), async-web3 (>=0.1.0, <=0.3.1) +111 more potentially affected by CVE-2026-114134 via black (20.8.0b1)

black PYPI version 20.8.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - agilecode-test-tools =0.4.0, =0.1.0, =0.1.3, =0.7.0, =0.0.5, =1.2.0, =1.6.4b1, =0.5.1, =0.0.2, =0.1.9, =0.0.0, =0.1.1 and more Source cves:...

adcami (>=0.0.1, <=0.1.2), autohooks-plugin-black (21.7.1) +23 more potentially affected by CVE-2026-114134 via black (21.7.0b0)

black PYPI version 21.7.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - adcami =0.0.1, =0.1.1, =0.7.0, =0.1.0, =1.16.0, =0.2.1, =1.0.2, =0.6.1b0, =6.2.0, =6.2.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-114134 Sour...

alvin-cli (0.0.1a0), avotes-parser-cli (0.5.0) +28 more potentially affected by CVE-2026-114134 via black (22.1.0)

black PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - alvin-cli 0.0.1a0 - avotes-parser-cli 0.5.0 - avotes-parser-core 0.5.0 - bettercode 0.2.0 - blue =0.9.0, =1.1.0, =0.1.0, =0.1.0, =0.0.2, =1.18.0,...

anovos (>=1.0.0, <=1.0.1), c7n-mailer (0.6.18) +14 more potentially affected by CVE-2026-114134 via black (22.8.0)

black PYPI version 22.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - anovos =1.0.0, =1.15.15, =0.1.1, =2.34.0, =0.0.4, =0.0.3, =2.3.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-114134 Source advisory:...

ape-safe (0.6.0), attercop (0.1.0) +43 more potentially affected by CVE-2026-114134 via black (22.10.0)

black PYPI version 22.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ape-safe 0.6.0 - attercop 0.1.0 - avotes-parser-cli =0.5.3, =0.5.3, =0.2.0, =0.0.1, =0.7.2, =1.0.0, =0.2.1, =0.1.0, =1.0.6, =1.0.9 and more Source...

aflowey (>=0.1.5, <=0.1.9), aicommit (>=0.0.1, <=0.1.0) +255 more potentially affected by CVE-2026-114134 via black (22.12.0)

black PYPI version 22.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aflowey =0.1.5, =0.0.1, =0.1.0, =0.1.0, =0.4.7, =0.1.0, =1.0.2, =1.0.0a0, =0.8.1, =0.2.0, =0.2.0, =0.8.0, =0.2.0, =0.8.4 and more Source cves:...

aiosoma (>=1.1.20, <=1.1.23), bblib (>=0.1.1, <=3.1.0) +9 more potentially affected by CVE-2026-114134 via black (24.1.1)

black PYPI version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma =1.1.20, =0.1.1, =1.0.0, =0.1.13, =0.0.1, =1.20.0, =2.105.0, =0.0.1, =0.0.3 - spellcheckmate 0.1.0 Source cves: CVE-2026-114134 Source...

aiosoma (>=1.1.24, <=1.1.25), avotes-parser-cli (>=0.5.5.post5, <=0.5.6) +18 more potentially affected by CVE-2026-114134 via black (24.2.0)

black PYPI version 24.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma =1.1.24, =0.5.5.post5, =0.5.5.post4, =0.1.15, =1.1.6, =1.20.2, =0.0.1, =2.108.0, =0.8.14, =0.0.0, =1.1.8, =0.0.0, =0.0.46 and more Source cve...

inmanta-dev-dependencies (2.116.0), ul-py-tool (>=1.16.0, <=1.16.2) potentially affected by CVE-2026-114134 via black (24.4.0)

black PYPI version 24.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - inmanta-dev-dependencies 2.116.0 - ul-py-tool =1.16.0, =1.16.2 Source cves: CVE-2026-114134 Source advisory: OSV:GHSA-CG8M-R9F2-5WM2...

inmanta-dev-dependencies (2.117.0) potentially affected by CVE-2026-114134 via black (24.4.1)

black PYPI version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - inmanta-dev-dependencies 2.117.0 Source cves: CVE-2026-114134 Source advisory: OSV:GHSA-CG8M-R9F2-5WM2...

aba-cli-scrapper (>=0.1.0, <=0.1.6), ali2b-cli-scrapper (>=1.0.0, <=1.0.1) +36 more potentially affected by CVE-2026-114134 via black (24.4.2)

black PYPI version 24.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aba-cli-scrapper =0.1.0, =1.0.0, =1.0.0rc1, =1.0.0rc1, =2.4.22, =0.1.21, =0.7.0, =1.0.22, =1.0.0, =1.0.6 and more Source cves: CVE-2026-114134 Source...

cloudquery-plugin-sdk (>=0.1.35, <=0.1.36), coeus-sphinx-theme (2024.8.23) +25 more potentially affected by CVE-2026-114134 via black (24.8.0)

black PYPI version 24.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - cloudquery-plugin-sdk =0.1.35, =0.5.2, =0.1.3, =0.3.0, =0.2.1, =0.18.0, =1.0.5, =2.129.0, =2409.2.0, =0.1.0, =0.7.2, =0.0.1, =1.0.0, =1.8.0 and more...

arthexis (>=0.1.31, <=0.1.34), dismo (0.2.43) +7 more potentially affected by CVE-2026-114134 via black (25.11.0)

black PYPI version 25.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - arthexis =0.1.31, =2.184.0, =1.59.0, =0.2.4, =1.0.0rc1, =1.0.0 - open-webui 0.6.41 - qtbmodels 0.1.0 Source cves: CVE-2026-114134 Source advisory:...

aac (>=0.4.0, <=0.5.21), aac-gen-gherkin (>=0.1.0, <=0.1.4) +140 more potentially affected by CVE-2026-114134 via black (25.12.0)

black PYPI version 25.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aac =0.4.0, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.5.2, =1.0.5, =0.1.0, =0.1.5, =0.1.20 and more Source cves: CVE-2026-114134 Source advisory:...

aideml (>=0.1.0, <=0.2.2), c2cciutils (>=1.1.0.dev20260322010408, <=1.2.34) +25 more potentially affected by CVE-2026-114134 via black (24.3.0)

black PYPI version 24.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aideml =0.1.0, =1.1.0.dev20260322010408, =0.1.17, =0.20.7, =0.0.9, =0.0.1, =0.4.8, =2.0.0, =2.113.0, =2.115.0 and more Source cves: CVE-2026-114134...