{"action":"Upgrade black to 26.10.1 or later.","affected":[{"fixed":"26.10.1","introduced":"0"}],"component":"black","cve_ids":["CVE-2026-114134"],"ecosystem":"PyPI","exploited":false,"fixed_versions":["26.10.1"],"ghsa_id":"GHSA-cg8m-r9f2-5wm2","id":"tcs_01M5JMCTZSWV0BW2DJTHHVRQ4X","modified_at":"2026-10-22T16:30:30.132713769Z","published_at":"2026-10-22T16:18:57Z","references":["https://osv.dev/vulnerability/GHSA-cg8m-r9f2-5wm2","https://github.com/psf/black/security/advisories/GHSA-cg8m-r9f2-5wm2","https://github.com/psf/black/pull/5510","https://github.com/psf/black/commit/ac1f71563aeccf73cf13ece00f231d9d6c66a514","https://github.com/psf/black","https://github.com/psf/black/releases/tag/26.10.1"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cg8m-r9f2-5wm2","url":"https://osv.dev/vulnerability/GHSA-cg8m-r9f2-5wm2"}],"summary":"Black: GitHub Action installs unvalidated required-version from pyproject.toml"}