OESA-2026-4064 python-black security update

The uncompromising code formatter Security Fixes: Black is the uncompromising Python code formatter. Starting in version 24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was...

jucodecorrector (0.1.0), jupyter-ai-magics (>=0.7.3, <=0.9.0) potentially affected by CVE-2026-55443 via langchain (0.0.159)

langchain PYPI version 0.0.159 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jucodecorrector 0.1.0 - jupyter-ai-magics =0.7.3, =0.9.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

definitive-openassistants (>=0.0.1, <=0.0.7), definitive-openassistants-fastapi (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.346)

langchain PYPI version 0.0.346 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - definitive-openassistants =0.0.1, =0.0.1, =1.7.0, =1.7.0, =2.7.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jupyter-ai-magics (>=0.10.0, <=2.0.1), pykoi (>=0.0.4, <=0.0.6) potentially affected by CVE-2026-55443 via langchain (0.0.220)

langchain PYPI version 0.0.220 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai-magics =0.10.0, =0.0.4, =0.0.6 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jupyter-ai-magics (>=1.1.0, <=2.1.0), talk-codebase (>=0.1.38, <=0.1.45) potentially affected by CVE-2026-55443 via langchain (0.0.223)

langchain PYPI version 0.0.223 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai-magics =1.1.0, =0.1.38, =0.1.45 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jupyter-ai (>=1.2.0, <=2.2.0), jupyter-ai-magics (>=1.2.0, <=2.2.0) potentially affected by CVE-2026-55443 via langchain (0.0.277)

langchain PYPI version 0.0.277 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai =1.2.0, =1.2.0, =2.2.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

docchain (0.0.5), jupyter-ai (>=0.7.0, <=0.7.2) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.158)

langchain PYPI version 0.0.158 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - docchain 0.0.5 - jupyter-ai =0.7.0, =0.7.0, =0.1.0, =0.1.14 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jupyter-ai (>=1.4.0, <=2.6.0), jupyter-ai-magics (>=1.4.0, <=2.6.0) potentially affected by CVE-2026-55443 via langchain (0.0.318)

langchain PYPI version 0.0.318 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai =1.4.0, =1.4.0, =2.6.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jupyter-ai-magics (>=0.10.0, <=2.0.1), pykoi (>=0.0.4, <=0.0.6) potentially affected by CVE-2026-55443 via langchain (0.0.220)

langchain PYPI version 0.0.220 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai-magics =0.10.0, =0.0.4, =0.0.6 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

jucodecorrector (0.1.0), jupyter-ai-magics (>=0.7.3, <=0.9.0) potentially affected by CVE-2026-55443 via langchain (0.0.159)

langchain PYPI version 0.0.159 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jucodecorrector 0.1.0 - jupyter-ai-magics =0.7.3, =0.9.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

definitive-openassistants (>=0.0.1, <=0.0.7), definitive-openassistants-fastapi (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.346)

langchain PYPI version 0.0.346 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - definitive-openassistants =0.0.1, =0.0.1, =1.7.0, =1.7.0, =2.7.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

jupyter-ai (>=1.2.0, <=2.2.0), jupyter-ai-magics (>=1.2.0, <=2.2.0) potentially affected by CVE-2026-55443 via langchain (0.0.277)

langchain PYPI version 0.0.277 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai =1.2.0, =1.2.0, =2.2.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

jupyter-ai (>=1.4.0, <=2.6.0), jupyter-ai-magics (>=1.4.0, <=2.6.0) potentially affected by CVE-2026-55443 via langchain (0.0.318)

langchain PYPI version 0.0.318 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai =1.4.0, =1.4.0, =2.6.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

jupyter-ai-magics (>=1.1.0, <=2.1.0), talk-codebase (>=0.1.38, <=0.1.45) potentially affected by CVE-2026-55443 via langchain (0.0.223)

langchain PYPI version 0.0.223 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jupyter-ai-magics =1.1.0, =0.1.38, =0.1.45 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

ai-agents (>=0.0.2, <=0.0.5), doc-comments-ai (0.1.13) +5 more potentially affected by CVE-2026-55443 via langchain (0.0.308)

langchain PYPI version 0.0.308 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - ai-agents =0.0.2, =1.3.0, =1.3.0, =0.0.7, =0.0.8 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

docchain (0.0.5), jupyter-ai (>=0.7.0, <=0.7.2) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.158)

langchain PYPI version 0.0.158 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - docchain 0.0.5 - jupyter-ai =0.7.0, =0.7.0, =0.1.0, =0.1.14 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

agentuniverse (>=0.0.6.dev1, <=0.0.7), bunkoer (0.0.3) +3 more potentially affected by CVE-2026-34070 via langchain-core (0.1.3)

langchain-core PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentuniverse =0.0.6.dev1, =1.8.1, =1.8.1, =0.1.115, =0.1.743 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

Arbitrary File Write

Black is vulnerable to Arbitrary File Write. The vulnerability is due to improper sanitization of the --python-cell-magics option when constructing cache file names, allowing attackers to manipulate the file path and write cache files to arbitrary locations on the filesystem...

SUSE CVE-2026-32274

Black is the uncompromising Python code formatter. Starting in version 24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which...

Linux Distros Unpatched Vulnerability : CVE-2026-32274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Black is the uncompromising Python code formatter. Starting in version 24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of which is...