Jwilk

**Name of the Vulnerable Software and Affected Versions** autokey versions prior to 0.61.3-2 **Description** The issue allows local attackers to write to arbitrary files via a symlink attack. This is a result of a flaw in the init script of the affected software. **Recommendations** For versions prior to 0.61.3-2, update to version 0.61.3-2 or later to resolve the issue. As a temporary workaround, consider restricting access to the init script to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** tqdm versions 4.4.1 through 4.10 **Description** The issue allows local users to execute arbitrary code via a crafted repository with a malicious git log in the current working directory. This is possible due to a flaw in the `tqdm. version` module. **Recommendations** For versions 4.4.1 through 4.10, consider disabling the `tqdm. version` module as a temporary workaround until a patch is available. Restrict access to the current working directory to minimize the risk of exploitation. Avoid using the `tqdm` library in environments where a malicious git log could be present until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** sociomantic-tsunami git-hub versions prior to 0.10.3 **Description** The issue allows remote attackers to execute arbitrary code via a crafted repository URL. **Recommendations** For versions prior to 0.10.3, update to version 0.10.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** sociomantic-tsunami git-hub versions prior to 0.10.3 **Description** The issue allows remote attackers to execute arbitrary code via a crafted repository name. **Recommendations** For versions prior to 0.10.3, update to version 0.10.3 or later to resolve the issue.