How many Python black CVEs are in CISA KEV?

None of Python black's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Python black vulnerabilities?

Yes — 1 of Python black's CVEs have a known public exploit.

Which versions of Python black are affected?

6 distinct Python black versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Python black CVEs?

Python black's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

What is the average severity of Python black CVEs?

The average CVSS base score across Python black's scored CVEs is 7.6.

Python black Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Python black vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Python black Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Python black has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

Severity and exploitation

How the CVSS severity of Python black's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Python black's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Python black's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Python black version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 24.3.01 CVE
< 26.3.01 CVE
< 26.3.11 CVE

Fixed in

24.3.01 CVE
26.3.01 CVE
26.3.11 CVE

Find a version

3 CVEs

Sort

Black: Arbitrary file writes from unsanitized user input in cache file name
CVE-2026-32274
Patch
CWE-22
High · CVSS 8.7
EPSS 0.7% (54th pct)2026-03-12
Black's vulnerable version parsing leads to RCE in GitHub Action
CVE-2026-31900
Patch
CWE-20
High · CVSS 8.7
EPSS 0.7% (51th pct)2026-03-11
Black vulnerable to Regular Expression Denial of Service (ReDoS)
CVE-2024-21503
Public exploit
Patch
CWE-1333
Medium · CVSS 5.3
EPSS 1.0% (62th pct)2024-03-19

Common weakness types

The CWE weakness categories most often found in Python black CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Python black CVEs were published each year.

2024

2026

Other Python products

Browse vulnerabilities for other products by Python.

cpython175 CVEs python147 CVEs pillow73 CVEs urllib322 CVEs requests7 CVEs setuptools5 CVEs keyring3 CVEs tarfile module3 CVEs

All Python vulnerabilities

Frequently asked questions

Common questions about Python black vulnerabilities.

How many CVEs does Python black have?: Python black has 3 published CVE records since 2024.
How many Python black CVEs are in CISA KEV?: None of Python black's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Python black vulnerabilities?: Yes — 1 of Python black's CVEs have a known public exploit.
Which versions of Python black are affected?: 6 distinct Python black versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Python black CVEs?: Python black's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
What is the average severity of Python black CVEs?: The average CVSS base score across Python black's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Python black vulnerabilities

Get an alert for each new Python black CVE, with AI-written analysis and remediation steps.

Create an account See pricing