{"action":"Upgrade tqdm to 4.66.3 or later.","affected":[{"fixed":"4.66.3","introduced":"4.4.0"}],"component":"tqdm","cve_ids":["CVE-2024-34062"],"ecosystem":"PyPI","epss":0.00436,"exploited":false,"fixed_versions":["4.66.3"],"ghsa_id":"GHSA-g7vv-2v7x-gj9p","id":"tcs_01M5KGWS7YHYYS1JQ8QGF24YWT","modified_at":"2026-07-07T17:48:11.555580867Z","published_at":"2026-07-07T11:45:41.060200Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1976","https://github.com/tqdm/tqdm/security/advisories/GHSA-g7vv-2v7x-gj9p","https://nvd.nist.gov/vuln/detail/CVE-2024-34062","https://github.com/tqdm/tqdm/commit/4e613f84ed2ae029559f539464df83fa91feb316","https://github.com/tqdm/tqdm","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRECVQCCESHBS3UJOWNXQUIX725TKNY6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VA337CYUS4SLRFV2P6MX6MZ2LKFURKJC","https://pypi.org/project/tqdm","https://github.com/advisories/GHSA-g7vv-2v7x-gj9p"],"severity":{"label":"low","score":3.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-1976","url":"https://osv.dev/vulnerability/PYSEC-2026-1976"}],"summary":"tqdm CLI arguments injection attack"}