Closed evgkirov closed 7 months ago
black before 24.3.0 contains CVE-2024-21503
black
Although we're not actually affected by this vulnerability as we don’t run black on untrusted code, it's better to have it updated rather than not.
GitHub Actions were updated:
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/setup-python@v4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Description
black
before 24.3.0 contains CVE-2024-21503Although we're not actually affected by this vulnerability as we don’t run
black
on untrusted code, it's better to have it updated rather than not.GitHub Actions were updated:
Checklist