GCVE-110-MAGEIA-2024-299

Advisory Published

Vulnetix · Advisory published September 13, 2024

Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-tqdm	0 (affected), 4.64.1-2.1.mga9 (unaffected)	—

References

Updated python-tqdm package fixes security vulnerability

advisory

Updated python-tqdm package fixes security vulnerability

issue

Updated python-tqdm package fixes security vulnerability

issue

Browse GCVE Records

73,877 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON