{"action":"Upgrade consoleme to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"0"}],"component":"consoleme","cve_ids":["CVE-2022-27177"],"ecosystem":"PyPI","epss":0.02257,"exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-74w3-2r77-fw5h","id":"tcs_01M5KF4W1QGGPVYHBZWYBX5K4K","modified_at":"2025-02-18T05:27:54.235204Z","published_at":"2022-04-03T00:00:58Z","references":["https://osv.dev/vulnerability/GHSA-74w3-2r77-fw5h","https://nvd.nist.gov/vuln/detail/CVE-2022-27177","https://github.com/Netflix/consoleme/commit/2a3c84eee524d77c427b3329a8419cbbce9e1d16","https://github.com/Netflix/ConsoleMe","https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2022-001.md","https://github.com/pypa/advisory-database/tree/main/vulns/consoleme/PYSEC-2022-189.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-74w3-2r77-fw5h","url":"https://osv.dev/vulnerability/GHSA-74w3-2r77-fw5h"}],"summary":"Use of Externally-Controlled Format String in consoleme"}