CVE-2024-34062

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/05/2024 Updated: 03/05/2024

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Debian Bug report logs - #1070372 tqdm: CVE-2024-34062 Package: src:tqdm; Maintainer for src:tqdm is Daniel Baumann <danielbaumann@progress-linuxorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Sat, 4 May 2024 15:57:06 UTC Severity: important Tags: security, upstream Found in version tqdm/4662-3 Fix ...

Public Github profile page.

About me Welcome to my Github Profile! I am a computer science student During my free time, I enjoy programming and learning about new technologies I am currently preparing for exams so I will reduce my activity - I will be more active again soon 😄 See you ❤️ Languages, Tools and OSes            

https://github.com/tqdm/tqdm/security/advisories/GHSA-g7vv-2v7x-gj9p https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070372 https://nvd.nist.gov https://github.com/CopperEagle/CopperEagle

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-34062

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect