- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 13 · 1 critical, 2 high, 6 medium, 4 low
- Registry
- PyPI
Advisories 13
- CVE-2025-8406Medium 6.3
Path Traversal in zenml-io/zenml
Affected: from 0.81.0, fixed in 0.84.2.
- CVE-2024-9340High 7.5
Denial of Service (DoS) via Multipart Boundary in zenml-io/zenml
Affected: fixed in 0.68.0; fixed in 0.68.0.
- CVE-2024-4311Medium 5.4
Lack of login attempt rate-limiting in zenml-io/zenml
Affected: fixed in 0.57.0rc2.
- CVE-2024-5062Medium 5.3
Reflected XSS through survey redirect parameter in zenml-io/zenml
Affected: fixed in 0.58.0; from 0.57.1, fixed in 0.58.0.
- CVE-2024-4680Low 3.9
Insufficient Session Expiration in zenml-io/zenml
Affected: through 0.56.3.
- CVE-2024-2032Low 3.1
Race Condition Vulnerability in zenml-io/zenml
Affected: fixed in 0.55.5; fixed in 0.55.5.
- CVE-2024-2035Medium 6.5
Improper Authorization in zenml-io/zenml
Affected: fixed in 0.56.2; fixed in 0.56.2.
- CVE-2024-2171Low 3.4
Stored XSS in zenml-io/zenml
Affected: fixed in 0.56.2; fixed in 0.56.2.
- CVE-2024-2213Low 3.3
Improper Authentication in zenml-io/zenml
Affected: fixed in 0.56.3; fixed in 0.56.3.
- CVE-2024-2383Medium 4.3
Clickjacking Vulnerability in zenml-io/zenml
Affected: fixed in 0.56.3; fixed in 0.56.3.
- CVE-2024-2083Critical 9.9
Directory Traversal in zenml-io/zenml
Affected: fixed in 0.55.5.
- CVE-2024-2260Medium 4.2
Session Fixation Vulnerability in zenml-io/zenml
Affected: fixed in 0.56.2; fixed in 0.56.2.
- CVE-2024-25723High 8.8
ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the…
Affected: fixed in 0.42.2; from 0.43.0, fixed in 0.43.1; from 0.45.0, fixed in 0.46.7; from 0.44.0, fixed in 0.44.4; fixed in 0.42.2; from 0.43.0, fixed in 0.43.1; from 0.44.0, fixed in 0.44.4; from 0.45.0, fixed in 0.46.7.