AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

ZenML security advisories

14 advisories across ZenML

Company profile
Medium 6.3Oct 5, 2025ZenML is vulnerable to Path Traversal through its `PathMaterializer` classCVE-2025-8406fixed in 0.84.2High 7.5Mar 20, 2025ZenML unauthenticated DoS via Multipart BoundryCVE-2024-9340fixed in 0.68.0Medium 5.4Nov 14, 2024Missing ratelimit on passwrod resets in zenmlCVE-2024-4311fixed in 0.57.0rc2Medium 6.1Jun 30, 2024Reflected Cross-Site Scripting (XSS) in zenmlCVE-2024-5062fixed in 0.58.0Medium 4.3Jun 24, 2024Improper line feed handling in zenmlCVE-2024-4460fixed in 0.57.1Low 3.9Jun 8, 2024zenml-io/zenml does not expire the session after password resetCVE-2024-4680no fix yetMedium 6.5Jun 6, 2024Improper authorization in zenmlCVE-2024-2035fixed in 0.56.2Low 3.1Jun 6, 2024Race condition in zenmlCVE-2024-2032fixed in 0.55.5Low 3.3Jun 6, 2024Improper authentication in zenmlCVE-2024-2213fixed in 0.56.3Medium 4.3Jun 6, 2024Clickjacking in zenmlCVE-2024-2383fixed in 0.56.3Low 3.4Jun 6, 2024Cross site scripting in zenmlCVE-2024-2171fixed in 0.56.2Critical 9.9Apr 16, 2024Directory traversal in zenmlCVE-2024-2083fixed in 0.55.5Medium 4.2Apr 16, 2024zenml Session Fixation vulnerabilityCVE-2024-2260fixed in 0.56.2High 6.5Feb 27, 2024ZenML Server Remote Privilege Escalation VulnerabilityCVE-2024-25723fixed in 0.42.2 +3
About ZenML

Elsewhere on Ibis: Paydays