Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

CraftBeerPi 4 allows arbitrary code execution

Fix availableCritical · CVSS 9.8EPSS 1.1%

Published May 2, 2024 · updated Oct 27, 2026

What to do

  1. Upgrade to a fixed version: cbpi4 4.4.1.a1.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIcbpi465 downloads/week

Vulnerable versions
>= 4.0.0.58, < 4.4.1.a1
Fixed in
4.4.1.a1

Check your project: pip show cbpi4

Sources

CWE-94 Improper Control of Generation of Code ('Code Injection')

← All critical vulnerabilities