SUSE CVE-2016-10075

The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...

CVE-2016-10075

The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...

libgen-downloader (>=0.0.102, <=0.0.104), subscene2 (1.0.2) +1 more potentially affected by CVE-2016-10075 via tqdm (2.2.3)

tqdm PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on tqdm and may be impacted: - libgen-downloader =0.0.102, =0.0.3, =0.0.4 Source cves: CVE-2016-10075 Source advisory: OSV:PYSEC-2017-74...

do-latency (>=0.3.0, <=0.3.2), pylinac (>=1.5.2, <=2.0.1) +1 more potentially affected by CVE-2016-10075 via tqdm (3.8.0)

tqdm PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tqdm and may be impacted: - do-latency =0.3.0, =1.5.2, =0.1.0, =0.1.5 Source cves: CVE-2016-10075 Source advisory: OSV:PYSEC-2017-74...

CVE-2016-10075

CVE-2016-10075 affects the tqdm Python package, specifically the tqdm._version module, with vulnerable versions including 4.4.1 and 4.10. A local attacker could cause arbitrary code execution by crafting a git log in the current working directory. The issue arises from how the module processes re...