3 matches found
CLSA-2025-1758672759 TuxCare security update for tqdm (1 CVE)
TuxCare rebuilt tqdm to address 1 CVE. Fixed in 4.66.1.post1+tuxcare...
PYSEC-2026-1976 tqdm CLI arguments injection attack
Impact Any optional non-boolean CLI arguments e.g. --delim, --buf-size, --manpath are passed through python's eval, allowing arbitrary code execution. Example: sh python -m tqdm --manpath="" + strexec"import os\nos.system'echo hi && killall python3'" + "" Patches...
GHSA-G7VV-2V7X-GJ9P tqdm CLI arguments injection attack
Impact Any optional non-boolean CLI arguments e.g. --delim, --buf-size, --manpath are passed through python's eval, allowing arbitrary code execution. Example: sh python -m tqdm --manpath="" + strexec"import os\nos.system'echo hi && killall python3'" + "" Patches...