Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command

Fix availableCritical · CVSS 9.6EPSS 0.94%

Published May 16, 2024 · updated Oct 27, 2026

What to do

  1. Upgrade to a fixed version: consoleme 1.4.0.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIconsoleme87 downloads/week

Vulnerable versions
< 1.4.0
Fixed in
1.4.0

Check your project: pip show consoleme

Sources

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

← All critical vulnerabilities