Skip to content
OpenAdvisories

Package · Debian

tqdm

2 known vulnerabilities.

2 results · Feed

  • Medium 4.8

    tqdm CLI arguments injection attack

    tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had be…

  • High 7.8

    TDQM Arbitrary Code Execution

    The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.