VYPR
← All advisories
Medium severity4.8OSV Advisory· Published May 3, 2024· Updated Apr 15, 2026

CVE-2024-34062

CVE-2024-34062

Description

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. --delim, --buf-size, --manpath) are passed through python's eval, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
tqdmPyPI
>= 4.4.0, < 4.66.34.66.3

Affected products

74

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.