PyPI/consoleme CVE-2022-27177: unknown, EPSS 2.26%

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2

Action: Upgrade consoleme to 1.2.2 or later.

pip install consoleme==1.2.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-189
• https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2022-001.md
• https://github.com/advisories/GHSA-74w3-2r77-fw5h

CVE-2022-27177 · published 2022-04-01T23:15:00Z · modified 2023-11-08T04:08:56.392941Z · JSON