https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:48:49.150949+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03340 bdu:2025-03340 2026-10-04T20:48:49.176531+00:00 bdu:2025-03340 https://cve.radiocsirt.org/vuln/brew-airshare-cve-2024-34062 BREW-airshare-CVE-2024-34062 — tqdm CLI arguments injection attack 2026-10-04T20:48:49.176565+00:00

Affected: Homebrew: airshare

### Impact Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. Example:

```sh python -m tqdm --manpath="\" + str(exec(\"import os\nos.system('echo hi && killall python3')\")) + \"" ```

### Patches https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316 released in `tqdm>=4.66.3`

### Workarounds None

### References - https://github.com/tqdm/tqdm/releases/tag/v4.66.3

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 certfr-2024-avi-0579 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T20:48:49.176605+00:00 certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/euvd-2026-217410 EUVD-2026-217410 2026-10-04T20:48:49.176622+00:00 EUVD-2026-217410 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34062 fkie_cve-2024-34062 2026-10-04T20:48:49.176633+00:00

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-g7vv-2v7x-gj9p GHSA-g7vv-2v7x-gj9p — tqdm CLI arguments injection attack 2026-10-04T20:48:49.176662+00:00

Affected: PyPI: tqdm

### Impact Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. Example:

```sh python -m tqdm --manpath="\" + str(exec(\"import os\nos.system('echo hi && killall python3')\")) + \"" ```

### Patches https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316 released in `tqdm>=4.66.3`

### Workarounds None

### References - https://github.com/tqdm/tqdm/releases/tag/v4.66.3

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-34062 msrc_CVE-2024-34062 — tqdm CLI arguments injection attack 2026-10-04T20:48:49.176687+00:00 msrc_CVE-2024-34062 https://cve.radiocsirt.org/vuln/oesa-2024-1554 OESA-2024-1554 — python-tqdm security update 2026-10-04T20:48:49.176702+00:00

Affected: openEuler:22.03-LTS: python-tqdm

tqdm derives from the Arabic word taqaddum which can mean "progress". Instantly make your loops show a smart progress meter - just wrap any iterable with tqdm(interable), and you are done! Security Fix(es): tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.(CVE-2024-34062)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13939-1 openSUSE-SU-2024:13939-1 — python-tqdm-bash-completion-4.66.4-1.1 on GA media 2026-10-04T20:48:49.176724+00:00

python-tqdm-bash-completion-4.66.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1976 PYSEC-2026-1976 — tqdm CLI arguments injection attack 2026-10-04T20:48:49.176739+00:00

Affected: PyPI: tqdm

### Impact Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. Example:

```sh python -m tqdm --manpath="\" + str(exec(\"import os\nos.system('echo hi && killall python3')\")) + \"" ```

### Patches https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316 released in `tqdm>=4.66.3`

### Workarounds None

### References - https://github.com/tqdm/tqdm/releases/tag/v4.66.3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-34062 UBUNTU-CVE-2024-34062 2026-10-04T20:48:49.176762+00:00

Affected: Ubuntu:Pro:22.04:LTS: tqdm, Ubuntu:Pro:24.04:LTS: tqdm

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had been addressed in release version 4.66.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1488 WID-SEC-W-2024-1488 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-04T20:48:49.176782+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen offenzulegen.