CVE-2026-31900
1 advisory.
PyPI/black CVE-2026-31900: critical 9.8
Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from
Action: Upgrade black to 26.3.0 or later.
pip install black==26.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.3.0 | - |
Fixed versions
| 26.3.0 |
Sources
- osv: PYSEC-2026-2120
- https://github.com/psf/black/security/advisories/GHSA-v53h-f6m7-xcgm
- https://github.com/psf/black/commit/0a2560b981364dde4c8cf8ce9d164c40669a8611
CVE-2026-31900 · published · modified · JSON