ansible-lint-26.9.0-1.1 on GA media (moderate)

ansible-lint-26.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11856-1 Rating: moderate Cross-References: CVE-2026-32274 CVSS scores: CVE-2026-32274 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2026-32274 SUSE : 6.8...

Fedora 44 : python-black / python-lsp-black / python-pytokens (2026-3805ba3721)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-3805ba3721 advisory. Upgrade to 26.5.1, solves serious vulnerabilities such as: CVE-2026-31900 CVE-2026-32274 Tenable has extracted the preceding description block...

Security Bulletin: Vulnerability in Black affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Black has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerability...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses black-26.1.0 which is vulnerable to CVE-2026-31900

Summary IBM Maximo Application Suite - Visual Inspection component uses black-26.1.0 which is vulnerable to CVE-2026-31900, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-31900 DESCRIPTION: Black is the uncompromising Pytho...

Security Bulletin: IBM Edge Data Collector uses black-24.10.0-py3-none-any.whl which is vulnerable to CVE-2026-31900, CVE-2026-32274.

Summary IBM Edge Data Collector uses black-24.10.0-py3-none-any.whl which is vulnerable to CVE-2026-31900, CVE-2026-32274. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-31900 DESCRIPTION: Black is the uncompromising Python code formatter...

openSUSE Security Advisory (SUSE-SU-2026:0900-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : python-black (SUSE-SU-2026:0900-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0900-1 advisory. This update for python-black fixes the following issue: - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name bsc1259608...

CVE-2026-32274 vulnerabilities

Vulnerabilities for packages: open-webui, nemo, label-studio, kserve...

badger-utils (0.1.0), bpystubgen (>=0.1.1, <=0.1.8) +3 more potentially affected by CVE-2026-32274 via black (21.8.0b0)

black PYPI version 21.8.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - badger-utils 0.1.0 - bpystubgen =0.1.1, =0.1.0.dev20211019, =0.2.0.dev20211210 - eth-brownie 1.16.3 - hikaru 0.8.0b0 Source cves: CVE-2026-32274...

academia-mcp (>=0.0.2, <=1.3.0), airbender-py-client (>=0.1.0, <=0.2.12) +60 more potentially affected by CVE-2026-32274 via black (25.1.0)

black PYPI version 25.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - academia-mcp =0.0.2, =0.1.0, =2021.12.1.dev0, =0.1.42, =1.0.0, =0.1.0, =0.1.1, =0.0.29a1, =1.7.0, =3.0.0, =0.2.1, =0.4.2 and more Source cves:...

aibs-informatics-test-resources (0.0.4), aiconfig-extension-gemini (0.0.5) +25 more potentially affected by CVE-2026-32274 via black (23.11.0)

black PYPI version 23.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aibs-informatics-test-resources 0.0.4 - aiconfig-extension-gemini 0.0.5 - aioinstagrapi =1.1.19, =1.1.15, =2.4.11, =0.1.0, =0.0.1,...

aflowey (>=0.1.5, <=0.1.9), aicommit (>=0.0.1, <=0.1.0) +255 more potentially affected by CVE-2026-32274 via black (22.12.0)

black PYPI version 22.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aflowey =0.1.5, =0.0.1, =0.1.0, =0.1.0, =0.4.7, =0.1.0, =1.0.2, =1.0.0a0, =0.8.1, =0.2.0, =0.2.0, =0.8.0, =0.2.0, =0.8.4 and more Source cves:...

ai-economist (>=1.0.0, <=1.1.1), aiae (>=0.1.2, <=1.0.2) +121 more potentially affected by CVE-2026-32274 via black (19.10.0b0)

black PYPI version 19.10.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ai-economist =1.0.0, =0.1.2, =0.1.0, =3.1.4, =0.1.1, =0.7.0, =0.1.0, =0.8.0, =0.5.0, =0.2.0, =0.2.1, =0.1.0, =0.5.1 and more Source cves:...

lmms-eval (>=0.0.0, <=0.2.3.post1) potentially affected by CVE-2026-32274 via black (24.1.0)

black PYPI version 24.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - lmms-eval =0.0.0, =0.2.3.post1 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

arches-containers (>=1.1.0a1, <=1.1.3rc1), arthexis (>=0.1.14, <=0.1.30) +14 more potentially affected by CVE-2026-32274 via black (25.9.0)

black PYPI version 25.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - arches-containers =1.1.0a1, =0.1.14, =19.0.7, =0.1.48, =0.0.59, =0.1.2, =2.179.0, =0.0.1, =1.7.0, =2025.35.0, =2026.55.0 and more Source cves:...

aiosoma (>=1.1.9, <=1.1.11), amsdal-models (>=0.0.1, <=0.0.20) +12 more potentially affected by CVE-2026-32274 via black (23.9.1)

black PYPI version 23.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - aiosoma =1.1.9, =0.0.1, =1.0.0, =0.1.4, =0.4.9a2, =0.0.5, =2.84.0, =0.1.0, =0.1.0, =0.1.0, =2023.33.0, =2024.31.0 Source cves: CVE-2026-32274 Source...

datamodel-code-generator (>=0.1.0, <=0.2.16), fluxio-parser (0.1.0) +16 more potentially affected by CVE-2026-32274 via black (19.3.0b0)

black PYPI version 19.3.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - datamodel-code-generator =0.1.0, =0.1.13, =0.1.4, =0.0.0, =0.0.12, =0.1.4, =2019.7.20, =0.0.5, =0.0.18 - straitjacket 201904.10.0b0 and more Source...

alvin-cli (0.0.1a0), avotes-parser-cli (0.5.0) +28 more potentially affected by CVE-2026-32274 via black (22.1.0)

black PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - alvin-cli 0.0.1a0 - avotes-parser-cli 0.5.0 - avotes-parser-core 0.5.0 - bettercode 0.2.0 - blue =0.9.0, =1.1.0, =0.1.0, =0.1.0, =0.0.2, =1.18.0,...

ape-safe (0.6.0), attercop (0.1.0) +43 more potentially affected by CVE-2026-32274 via black (22.10.0)

black PYPI version 22.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ape-safe 0.6.0 - attercop 0.1.0 - avotes-parser-cli =0.5.3, =0.5.3, =0.2.0, =0.0.1, =0.7.2, =1.0.0, =0.2.1, =0.1.0, =1.0.6, =1.0.9 and more Source...

automate-linkedin (>=0.1.0, <=0.1.2), avotes-parser-cli (0.5.2) +28 more potentially affected by CVE-2026-32274 via black (22.6.0)

black PYPI version 22.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - automate-linkedin =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =1.0.0, =2.25.0, =1.7.2, =0.0.115, =0.0.136 and more Source cves: CVE-2026-32274 Source...