CVE-2016-10075: Code Injection
(updated )
The tqdm._version
module in tqdm allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.
References
Detect and mitigate CVE-2016-10075 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →