{"action":"Upgrade tqdm to 4.66.3 or later.","affected":[{"fixed":"4.66.3","introduced":"4.4.0"}],"component":"tqdm","cve_ids":["CVE-2024-34062"],"ecosystem":"PyPI","epss":0.00436,"exploited":false,"fixed_versions":["4.66.3"],"ghsa_id":"GHSA-g7vv-2v7x-gj9p","id":"tcs_01M5KFH3S9F9MBA0D6CQFZCYEV","modified_at":"2026-09-10T03:50:13.776534451Z","published_at":"2024-05-03T19:33:28Z","references":["https://osv.dev/vulnerability/GHSA-g7vv-2v7x-gj9p","https://github.com/tqdm/tqdm/security/advisories/GHSA-g7vv-2v7x-gj9p","https://nvd.nist.gov/vuln/detail/CVE-2024-34062","https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316","https://github.com/tqdm/tqdm","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRECVQCCESHBS3UJOWNXQUIX725TKNY6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VA337CYUS4SLRFV2P6MX6MZ2LKFURKJC"],"severity":{"label":"low","score":3.9},"sources":[{"source":"osv","source_id":"GHSA-g7vv-2v7x-gj9p","url":"https://osv.dev/vulnerability/GHSA-g7vv-2v7x-gj9p"}],"summary":"tqdm CLI arguments injection attack"}