Approved changes feed: RSS · Atom

cpe:2.3:a:tqdm_project:tqdm:4.10:*:*:*:*:*:*:*

part: a version: 4.10 update: *

VendorTqdm Project (4d3ee41a-38c8-516b-95cd-c486d21f980f)
ProductTqdm (0450a173-6e8d-5d2f-a989-5d4aea7f22ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/tqdm purl2cpe 2026-06-01 10:17:00.003820
pkg:deb/ubuntu/tqdm purl2cpe 2026-06-01 10:17:00.003823
pkg:docker/tqdm/tqdm purl2cpe 2026-06-01 10:17:00.003826
pkg:github/tqdm/tqdm purl2cpe 2026-06-01 10:17:00.003829
pkg:pypi/tqdm purl2cpe 2026-06-01 10:17:00.003831
pkg:rpm/fedora/python-tqdm purl2cpe 2026-06-01 10:17:00.003834
pkg:rpm/opensuse/python-tqdm purl2cpe 2026-06-01 10:17:00.003837
pkg:sourceforge/tqdm.mirror purl2cpe 2026-06-01 10:17:00.003840

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10075 vulnerable 2026-06-08 05:07:17.108844 Details available
The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.
Published: 2017-01-19T20:00:00.000Z
Updated: 2024-08-06T03:07:32.121Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.