Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/05/2024 Updated: 03/05/2024

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Debian Bug report logs - #1070372 tqdm: CVE-2024-34062 Package: src:tqdm; Maintainer for src:tqdm is Daniel Baumann <danielbaumann@progress-linuxorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Sat, 4 May 2024 15:57:06 UTC Severity: important Tags: security, upstream Found in version tqdm/4662-3 Fix ...

https://github.com/tqdm/tqdm/security/advisories/GHSA-g7vv-2v7x-gj9p https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070372 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-34062

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect