CVE-2016-10075

Name of the Vulnerable Software and Affected Versions tqdm versions 4.4.1 through 4.10

Description The issue allows local users to execute arbitrary code via a crafted repository with a malicious git log in the current working directory. This is possible due to a flaw in the tqdm. version module.

Recommendations For versions 4.4.1 through 4.10, consider disabling the tqdm. version module as a temporary workaround until a patch is available. Restrict access to the current working directory to minimize the risk of exploitation. Avoid using the tqdm library in environments where a malicious git log could be present until the issue is resolved.