Skip to content
OpenAdvisories

Package · Debian

tqdm

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.8

    tqdm CLI arguments injection attack

    tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had be…