GHSA-3936-CMFR-PM3M Black: Arbitrary file writes from unsanitized user input in cache file name
Impact Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file...