CVE-2025-55671
Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program.
- Update to 1.0.22
Published Updated
PatchFirst · Latest vulnerabilities
tkeasygui vulnerabilities
Vulnerabilities published for tkeasygui in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2025-55037
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.
- Update to 1.0.22
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.