ROOT-APP-PYPI-CVE-2026-32274
- Source
- https://root.io/security/ROOT-APP-PYPI-CVE-2026-32274
- Import Source
- https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-32274.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ROOT-APP-PYPI-CVE-2026-32274
- Upstream
- Published
- 2026-07-17T11:30:25Z
- Modified
- 2026-07-17T12:15:20.367384043Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- CVE-2026-32274 in rootio-black - Patched by Root
- Details
-
Root has patched CVE-2026-32274 in the rootio-black package for Root:PyPI. Multiple fixed versions available.
- Database specific
{ "distro": "pypi", "source": "Root", "severity": "HIGH", "distro_version": "" }- References
-
Affected packages
Root:PyPI / rootio-black
Package
- Name
- rootio-black
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed26.1.0+root.io.1Fixed25.9.0+root.io.1Fixed25.9.0+root.io.2Fixed24.4.2+root.io.1Fixed24.10.0+root.io.1Fixed25.11.0+root.io.1Fixed24.3.0+root.io.1Fixed24.3.0+root.io.2Fixed26.1.0+root.io.2Fixed24.10.0+root.io.2Fixed25.11.0+root.io.2Fixed24.4.2+root.io.2Fixed25.9.0+root.io.3Fixed23.1a1+root.io.1Fixed23.9.0+root.io.1Fixed23.1.0+root.io.1Fixed23.10.1+root.io.1Fixed23.12.0+root.io.1Fixed23.7.0+root.io.1Fixed23.12.1+root.io.1Fixed23.9.1+root.io.1Fixed23.3.0+root.io.1Fixed23.10.0+root.io.1Fixed23.11.0+root.io.1Fixed25.12.0+root.io.1Fixed23.12.1+root.io.2Fixed23.10.0+root.io.2Fixed23.3.0+root.io.2Fixed23.1a1+root.io.2Fixed23.9.1+root.io.2Fixed23.12.0+root.io.2Fixed23.1.0+root.io.2Fixed23.11.0+root.io.2Fixed23.7.0+root.io.2Fixed23.10.1+root.io.2Fixed23.9.0+root.io.2
Database specific
root_patched
true
root_patch_version
"root.io.2"
source
"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-32274.json"
upstream_version
"23.9.0"
all_fixed_versions
[
"26.1.0+root.io.1",
"25.9.0+root.io.1",
"25.9.0+root.io.2",
"24.4.2+root.io.1",
"24.10.0+root.io.1",
"25.11.0+root.io.1",
"24.3.0+root.io.1",
"24.3.0+root.io.2",
"26.1.0+root.io.2",
"24.10.0+root.io.2",
"25.11.0+root.io.2",
"24.4.2+root.io.2",
"25.9.0+root.io.3",
"23.1a1+root.io.1",
"23.9.0+root.io.1",
"23.1.0+root.io.1",
"23.10.1+root.io.1",
"23.12.0+root.io.1",
"23.7.0+root.io.1",
"23.12.1+root.io.1",
"23.9.1+root.io.1",
"23.3.0+root.io.1",
"23.10.0+root.io.1",
"23.11.0+root.io.1",
"25.12.0+root.io.1",
"23.12.1+root.io.2",
"23.10.0+root.io.2",
"23.3.0+root.io.2",
"23.1a1+root.io.2",
"23.9.1+root.io.2",
"23.12.0+root.io.2",
"23.1.0+root.io.2",
"23.11.0+root.io.2",
"23.7.0+root.io.2",
"23.10.1+root.io.2",
"23.9.0+root.io.2"
]
total_fixed_versions
36.0
Root:PyPI / black
Package
- Name
- black
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed24.3.0+aikido.2Fixed26.1.0+aikido.2Fixed24.10.0+aikido.2Fixed25.11.0+aikido.2Fixed24.4.2+aikido.2Fixed25.9.0+aikido.3Fixed23.1a1+aikido.1Fixed23.9.0+aikido.1Fixed23.1.0+aikido.1Fixed23.10.1+aikido.1Fixed23.12.0+aikido.1Fixed23.7.0+aikido.1Fixed23.12.1+aikido.1Fixed23.9.1+aikido.1Fixed23.3.0+aikido.1Fixed23.10.0+aikido.1Fixed23.11.0+aikido.1
Database specific
upstream_version
"23.11.0+aikido.1"
root_patch_version
""
source
"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-32274.json"
root_patched
true
total_fixed_versions
17.0
all_fixed_versions
[
"24.3.0+aikido.2",
"26.1.0+aikido.2",
"24.10.0+aikido.2",
"25.11.0+aikido.2",
"24.4.2+aikido.2",
"25.9.0+aikido.3",
"23.1a1+aikido.1",
"23.9.0+aikido.1",
"23.1.0+aikido.1",
"23.10.1+aikido.1",
"23.12.0+aikido.1",
"23.7.0+aikido.1",
"23.12.1+aikido.1",
"23.9.1+aikido.1",
"23.3.0+aikido.1",
"23.10.0+aikido.1",
"23.11.0+aikido.1"
]