| ZenML is vulnerable to Path Traversal through its `PathMaterializer` classCVE-2025-8406 · GHSA-Q92X-2X5G-H365Version ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
| ZenML Server Remote Privilege Escalation VulnerabilityCVE-2024-25723 · GHSA-VF7J-CMRJ-PMMMVersion ranges need review. |
zenml |
PyPI |
High
|
Fix reported |
|
| Missing ratelimit on passwrod resets in zenmlCVE-2024-4311 · GHSA-J3VQ-PMP5-R5XJVersion ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
| Improper line feed handling in zenmlCVE-2024-4460 · GHSA-7GJR-HCC3-XFR4Version ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
| zenml-io/zenml does not expire the session after password resetCVE-2024-4680 · GHSA-99HM-86H7-GR3GVersion ranges need review. |
zenml |
PyPI |
Low
|
No fix reported |
|
| Race condition in zenmlCVE-2024-2032 · GHSA-C546-8JMQ-HPRJVersion ranges need review. |
zenml |
PyPI |
Low
|
Fix reported |
|
| Improper authorization in zenmlCVE-2024-2035 · GHSA-9X88-4JG8-4VF7Version ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
| Cross site scripting in zenmlCVE-2024-2171 · GHSA-VWGF-7F9H-H499Version ranges need review. |
zenml |
PyPI |
Low
|
Fix reported |
|
| zenml Session Fixation vulnerabilityCVE-2024-2260 · GHSA-G3R5-72HF-P7P2Version ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
| Directory traversal in zenmlCVE-2024-2083 · GHSA-6H3F-43VQ-53HJVersion ranges need review. |
zenml |
PyPI |
Critical
|
Fix reported |
|
| ZenML unauthenticated DoS via Multipart BoundryCVE-2024-9340 · GHSA-6GMF-2369-C76CVersion ranges need review. |
zenml |
PyPI |
High
|
Fix reported |
|
| Clickjacking in zenmlCVE-2024-2383 · GHSA-MQ73-G4QR-FGCQVersion ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
| Improper authentication in zenmlCVE-2024-2213 · GHSA-J527-V579-M98HVersion ranges need review. |
zenml |
PyPI |
Low
|
Fix reported |
|
| Reflected Cross-Site Scripting (XSS) in zenmlCVE-2024-5062 · GHSA-3434-HC3M-8MMMVersion ranges need review. |
zenml |
PyPI |
Medium
|
Fix reported |
|
