CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2016-10075
High (7.8) in tqdm project tqdm. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in tqdm 4.11.2.
The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWE
- CWE-17
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tqdm_project:tqdm
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-r7q7-xcjw-qx8q | PyPI | tqdm | >=4.4.1 <4.11.2 | 4.11.2 |
| GHSA-r7q7-xcjw-qx8q | PyPI | tqdm | >=4.10.0 <4.11.2 | 4.11.2 |
| PYSEC-2017-74 | PyPI | tqdm | <4.11.2 | 4.11.2 |