2 matches found
PYSEC-2026-1976 tqdm CLI arguments injection attack
Impact Any optional non-boolean CLI arguments e.g. --delim, --buf-size, --manpath are passed through python's eval, allowing arbitrary code execution. Example: sh python -m tqdm --manpath="" + strexec"import os\nos.system'echo hi && killall python3'" + "" Patches...
3.9CVSS6.7AI score0.00432EPSS
SaveExploits0References9
GHSA-G7VV-2V7X-GJ9P tqdm CLI arguments injection attack
Impact Any optional non-boolean CLI arguments e.g. --delim, --buf-size, --manpath are passed through python's eval, allowing arbitrary code execution. Example: sh python -m tqdm --manpath="" + strexec"import os\nos.system'echo hi && killall python3'" + "" Patches...
3.9CVSS6.9AI score0.00432EPSS
SaveExploits0References7
20