Tqdm vulnerabilities
2 known vulnerabilities affecting tqdm/tqdm.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-34062MEDIUMCVSS 4.8v>= 4.4.0, < 4.66.32024-05-03
CVE-2024-34062 [MEDIUM] CWE-74 CVE-2024-34062: tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g.
tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known
ghsanvdosv
CVE-2016-10075HIGHCVSS 7.8≥ 4.4.1, < 4.11.2≥ 4.10.0, < 4.11.22022-05-14
CVE-2016-10075 [HIGH] CWE-94 TDQM Arbitrary Code Execution
TDQM Arbitrary Code Execution
The `tqdm._version` module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.
ghsaosv