Advisoriesby Ibis
ZenML security advisories
14 advisories · none critical or high in 12 months · latest Oct 5, 2025
14 advisories
ZenML is vulnerable to Path Traversal through its `PathMaterializer` classCVE-2025-8406fixed in 0.84.2ZenML unauthenticated DoS via Multipart BoundryCVE-2024-9340fixed in 0.68.0Missing ratelimit on passwrod resets in zenmlCVE-2024-4311fixed in 0.57.0rc2Reflected Cross-Site Scripting (XSS) in zenmlCVE-2024-5062fixed in 0.58.0Improper line feed handling in zenmlCVE-2024-4460fixed in 0.57.1zenml-io/zenml does not expire the session after password resetCVE-2024-4680no fix yetImproper authorization in zenmlCVE-2024-2035fixed in 0.56.2Race condition in zenmlCVE-2024-2032fixed in 0.55.5Improper authentication in zenmlCVE-2024-2213fixed in 0.56.3Clickjacking in zenmlCVE-2024-2383fixed in 0.56.3Cross site scripting in zenmlCVE-2024-2171fixed in 0.56.2Directory traversal in zenmlCVE-2024-2083fixed in 0.55.5zenml Session Fixation vulnerabilityCVE-2024-2260fixed in 0.56.2ZenML Server Remote Privilege Escalation VulnerabilityCVE-2024-25723fixed in 0.42.2 +3