MEDIUM 6.1 PyPI
GHSA-3434-hc3m-8mmm · CVE-2024-5062, PYSEC-2024-176 Reflected Cross-Site Scripting (XSS) in zenml
Modified: 1/21/2025
package
PyPI / zenml
pkg:pypi/zenml
HIGH 7.5 PyPI
GHSA-6gmf-2369-c76c · CVE-2024-9340, PYSEC-2025-57 ZenML unauthenticated DoS via Multipart Boundry
Modified: 6/30/2025
CRITICAL 9.9 PyPI
GHSA-6h3f-43vq-53hj · CVE-2024-2083, PYSEC-2024-247 Directory traversal in zenml
Modified: 5/12/2025
MEDIUM 4.3 PyPI
GHSA-7gjr-hcc3-xfr4 · CVE-2024-4460 Improper line feed handling in zenml
Modified: 6/25/2024
LOW 3.9 PyPI
GHSA-99hm-86h7-gr3g · CVE-2024-4680 zenml-io/zenml does not expire the session after password reset
Modified: 7/22/2024
MEDIUM 6.5 PyPI
GHSA-9x88-4jg8-4vf7 · CVE-2024-2035, PYSEC-2024-169 Improper authorization in zenml
Modified: 10/16/2025
LOW 3.1 PyPI
GHSA-c546-8jmq-hprj · CVE-2024-2032, PYSEC-2024-105 Race condition in zenml
Modified: 10/14/2024
MEDIUM 4.2 PyPI
GHSA-g3r5-72hf-p7p2 · CVE-2024-2260, PYSEC-2024-254 zenml Session Fixation vulnerability
Modified: 6/13/2025
MEDIUM 5.4 PyPI
GHSA-j3vq-pmp5-r5xj · CVE-2024-4311 Missing ratelimit on passwrod resets in zenml
Modified: 11/18/2024
LOW 3.3 PyPI
GHSA-j527-v579-m98h · CVE-2024-2213, PYSEC-2024-193 Improper authentication in zenml
Modified: 10/16/2025
MEDIUM 4.3 PyPI
GHSA-mq73-g4qr-fgcq · CVE-2024-2383, PYSEC-2024-194 Clickjacking in zenml
Modified: 1/21/2025
MEDIUM 6.3 PyPI
GHSA-q92x-2x5g-h365 · CVE-2025-8406 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Modified: 10/7/2025
MEDIUM 6.5 PyPI
GHSA-vf7j-cmrj-pmmm · CVE-2024-25723 ZenML Server Remote Privilege Escalation Vulnerability
Modified: 11/22/2024
LOW 3.4 PyPI
GHSA-vwgf-7f9h-h499 · CVE-2024-2171, PYSEC-2024-170 Cross site scripting in zenml
Modified: 1/21/2025
LOW 3.1 PyPI
PYSEC-2024-105 · CVE-2024-2032, GHSA-c546-8jmq-hprj Modified: 6/10/2026
MEDIUM 6.5 PyPI
PYSEC-2024-169 · CVE-2024-2035, GHSA-9x88-4jg8-4vf7 Modified: 6/10/2026
MEDIUM 4.8 PyPI
PYSEC-2024-170 · CVE-2024-2171, GHSA-vwgf-7f9h-h499 Modified: 6/10/2026
MEDIUM 6.1 PyPI
PYSEC-2024-176 · CVE-2024-5062, GHSA-3434-hc3m-8mmm Modified: 6/10/2026
LOW 3.3 PyPI
PYSEC-2024-193 · CVE-2024-2213, GHSA-j527-v579-m98h Modified: 6/10/2026
MEDIUM 6.1 PyPI
PYSEC-2024-194 · CVE-2024-2383, GHSA-mq73-g4qr-fgcq Modified: 6/10/2026
CRITICAL 9.9 PyPI
PYSEC-2024-247 · CVE-2024-2083, GHSA-6h3f-43vq-53hj Modified: 6/10/2026
MEDIUM 4.2 PyPI
PYSEC-2024-254 · CVE-2024-2260, GHSA-g3r5-72hf-p7p2 Modified: 6/10/2026
— PyPI
PYSEC-2025-57 · CVE-2024-9340, GHSA-6gmf-2369-c76c Modified: 6/10/2026