Python Black — known CVE vulnerabilities

Every CVE whose affected-product data names Python Black, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-31900 — CVSS 9.8 (critical): Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option…
• CVE-2026-32274 — CVSS 7.5 (high): Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various…