Skip to content

Fix for security warning regarding black package #13

@Ritunjai-Sharma

Description

@Ritunjai-Sharma

What
Github raised this security warning https://gist.github.com/alon710/213feea7a4693b5774694763c9a88e80

Why
Black versions prior to 26.3.1 fail to properly hash short user-controlled configurations, leading to a path traversal vulnerability. So we need to fix this vulnerability.

How
Upgrade black to >=26.3.1, This would also require upgrading min python to 3.10

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions