Only the latest non-prerelease version is supported.
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.
Security: psf/black
Security
SECURITY.md
-
Arbitrary file writes from unsanitized user input in cache file nameGHSA-3936-cmfr-pm3m published
Mar 12, 2026 by JelleZijlstraHigh -
Vulnerable version parsing leads to RCE in GitHub ActionGHSA-v53h-f6m7-xcgm published
Mar 6, 2026 by JelleZijlstraHigh
Learn more about advisories related to psf/black in the GitHub Advisory Database