StackRadar

CVE-2024-34062

Low

Advisory

Published 3 May 2024In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.9
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
1 of 1
affected package

tqdm CLI arguments injection attack

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
tqdmpypi4.45.0, 4.46.0, 4.46.1, 4.50.2+7 more4.66.337
OSV records
GHSA-g7vv-2v7x-gj9p
Also known as
PYSEC-2026-1976

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tqdm@4.64.0
4.66.3

Open the chart page →

7,705
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
tqdm@4.66.1
4.66.3
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tqdm@4.66.1
4.66.3

Open the chart page →

12,746
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
tqdm@4.66.1
4.66.3

Open the chart page →

6,041
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tqdm@4.50.2
4.66.3

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
tqdm@4.66.1
4.66.3

Open the chart page →

14,094
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
tqdm@4.64.1
4.66.3

Open the chart page →

107,811
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
tqdm@4.66.2
4.66.3

Open the chart page →

22,202
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tqdm@4.66.2
4.66.3

Open the chart page →

11,205
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
tqdm@4.64.1
4.66.3

Open the chart page →

5,853
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
tqdm@4.64.0
4.66.3

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
tqdm@4.62.3
4.66.3

Open the chart page →

7,801
mlflow-controllermlflow-deployment-controller0.1.81 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
tqdm@4.62.3
4.66.3

Open the chart page →

8,957
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
tqdm@4.64.1
4.66.3

Open the chart page →

5,804
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
tqdm@4.66.1
4.66.3
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
tqdm@4.66.1
4.66.3
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
tqdm@4.62.0
4.66.3

Open the chart page →

25,669
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
tqdm@4.46.0
4.66.3

Open the chart page →

13,156
yadmscronce0.3.02 of 2See more

yadms cronce 0.3.0

2 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
mcronce/yadms-ftp:latestf820ef2e3c26
tqdm@4.45.0
4.66.3
mcronce/yadms-web:latestc03c1c7f5aa9
tqdm@4.50.2
4.66.3

Open the chart page →

2,500
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
tqdm@4.66.1
4.66.3

Open the chart page →

6,179
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
codecov/self-hosted-worker:24.4.1837f546b479b
tqdm@4.66.1
4.66.3

Open the chart page →

24,917
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
tqdm@4.65.0
4.66.3

Open the chart page →

9,334
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tqdm@4.64.1
4.66.3

Open the chart page →

4,085
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
tqdm@4.62.3
4.66.3

Open the chart page →

16,123
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tqdm@4.66.1
4.66.3

Open the chart page →

16,384
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
tqdm@4.66.1
4.66.3

Open the chart page →

6,447
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
tqdm@4.64.1
4.66.3

Open the chart page →

3,294
mongodb-secure-backupmongodb-secure-backup1.0.01 of 2See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
tqdm@4.65.0
4.66.3

Open the chart page →

1,033
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
tqdm@4.65.0
4.66.3

Open the chart page →

5,456
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
socialmediamacroscope/preprocessing:0.1.3ca863306314b
tqdm@4.66.1
4.66.3
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
tqdm@4.66.1
4.66.3

Open the chart page →

109,294
remla23-team17remla23-team171.0.01 of 2See more

remla23-team17 remla23-team17 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
tqdm@4.65.0
4.66.3

Open the chart page →

4,447
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
tqdm@4.64.0
4.66.3

Open the chart page →

25,737
classificationsignalen4.24.01 of 1See more

classification signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
tqdm@4.46.1
4.66.3

Open the chart page →

1,553
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tqdm@4.62.3
4.66.3

Open the chart page →

5,321
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-34062.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
tqdm@4.64.1
4.66.3

Open the chart page →

5,846

Container images carrying it

37 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
tqdm@4.65.0
4.66.3
1
buntha/mlflow:2.1.1154542cc3083
tqdm@4.64.1
4.66.3
1
cloudve/ttyd:latestd79c1c5881c0
tqdm@4.46.0
4.66.3
1
codecov/self-hosted-worker:24.4.1837f546b479b
tqdm@4.66.1
4.66.3
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
tqdm@4.66.1
4.66.3
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
tqdm@4.66.1
4.66.3
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
tqdm@4.62.0
4.66.3
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
tqdm@4.66.2
4.66.3
1
evk02/mlflow:2.2.1ef6ff257ef35
tqdm@4.65.0
4.66.3
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tqdm@4.64.1
4.66.3
1
flyway/flyway:9.1545b5d7cdc75a
tqdm@4.65.0
4.66.3
1
flyway/flyway:9.14.1-alpine80f12c80502b
tqdm@4.64.1
4.66.3
1
fossology/fossology:4.2.18bd1f22ba7bb
tqdm@4.64.1
4.66.3
1
hhyo/archery:v1.9.11aa41843419e
tqdm@4.64.1
4.66.3
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
tqdm@4.66.1
4.66.3
1
homeassistant/home-assistant:2023.12.48d000332b09b
tqdm@4.66.1
4.66.3
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tqdm@4.50.2
4.66.3
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
tqdm@4.62.3
4.66.3
1
mcronce/yadms-ftp:latestf820ef2e3c26
tqdm@4.45.0
4.66.3
1
mcronce/yadms-web:latestc03c1c7f5aa9
tqdm@4.50.2
4.66.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tqdm@4.62.3
4.66.3
1
pangeo/base-notebook:2024.01.155fbe688a4f80
tqdm@4.66.1
4.66.3
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
tqdm@4.64.0
4.66.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
tqdm@4.46.1
4.66.3
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
tqdm@4.66.1
4.66.3
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
tqdm@4.66.1
4.66.3
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
tqdm@4.62.3
4.66.3
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
tqdm@4.62.3
4.66.3
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tqdm@4.66.2
4.66.3
1
ghcr.io/dask/dask:2024.1.0080150de7d86
tqdm@4.66.1
4.66.3
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tqdm@4.66.1
4.66.3
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tqdm@4.64.0
4.66.3
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
tqdm@4.66.1
4.66.3
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
tqdm@4.64.0
4.66.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tqdm@4.66.1
4.66.3
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
tqdm@4.65.0
4.66.3
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
tqdm@4.64.1
4.66.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.