Lucene search
K

8 matches found

OSV
OSV
added 2026/03/12 8:16 p.m.2 views

DEBIAN-CVE-2026-32274

Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the...

7.5CVSS8.6AI score0.00424EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/03/12 8:16 p.m.1 views

CVE-2026-32274

Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the...

8.7CVSS6AI score0.00424EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/12 7:47 p.m.4 views

CVE-2026-32274 Black: Arbitrary file writes from unsanitized user input in cache file name

Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the...

8.7CVSS5.9AI score0.00424EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/03/12 6:33 p.m.7 views

Black: Arbitrary file writes from unsanitized user input in cache file name

Impact Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file...

8.7CVSS5.9AI score0.00424EPSS
Exploits0References6Affected Software1
Apple
Apple
added 2026/03/04 12:0 a.m.12 views

Apple Security Update: macOS Tahoe 26.3.1

Apple recommends to install security update macOS Tahoe 26.3.1 on devices macOS Tahoe...

5.9AI score
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.0 views

PT-2026-25073

Name of the Vulnerable Software and Affected Versions Black versions prior to 26.3.1 Description Black, a Python code formatter, prior to version 26.3.1, improperly sanitizes user-supplied input when constructing the filename for a cache file. Specifically, the value provided to the...

8.7CVSS5.9AI score0.00424EPSS
Exploits0References29
Cvelist
Cvelist
added 2022/08/11 2:46 p.m.13 views

CVE-2022-34260 Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Illustrator versions 26.3.1 and earlier and 25.4.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

7.8CVSS8AI score0.00354EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/08/11 2:45 p.m.19 views

CVE-2022-34261 Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Illustrator versions 26.3.1 and earlier and 25.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

5.5CVSS6AI score0.00355EPSS
Exploits0References1
Rows per page
Query Builder