CVE-2024-21503

Summary

CVE-2024-21503 is a vulnerability affecting versions of the Python package Black before 24.3.0. This issue involves a Regular Expression Denial of Service (ReDoS) risk in the lines_with_leading_tabs_expanded function located in the strings.py file. An attacker can trigger a denial of service by supplying malicious input to this function. The vulnerability is more significant when Black is run on untrusted user input or when docstrings contain extensive amounts of leading tab characters.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.