MEDIUM6.1PyPI
GHSA-3434-hc3m-8mmm· CVE-2024-5062, PYSEC-2024-176Reflected Cross-Site Scripting (XSS) in zenml
Modified: 1/21/2025
package
PyPI/zenml
pkg:pypi/zenml
HIGH7.5PyPI
GHSA-6gmf-2369-c76c· CVE-2024-9340, PYSEC-2025-57ZenML unauthenticated DoS via Multipart Boundry
Modified: 6/30/2025
CRITICAL9.9PyPI
GHSA-6h3f-43vq-53hj· CVE-2024-2083, PYSEC-2024-247Directory traversal in zenml
Modified: 5/12/2025
MEDIUM4.3PyPI
GHSA-7gjr-hcc3-xfr4· CVE-2024-4460, PYSEC-2026-2068Improper line feed handling in zenml
Modified: 7/7/2026
LOW3.9PyPI
GHSA-99hm-86h7-gr3g· CVE-2024-4680, PYSEC-2026-2069zenml-io/zenml does not expire the session after password reset
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-9x88-4jg8-4vf7· CVE-2024-2035, PYSEC-2024-169Improper authorization in zenml
Modified: 10/16/2025
LOW3.1PyPI
GHSA-c546-8jmq-hprj· CVE-2024-2032, PYSEC-2024-105Race condition in zenml
Modified: 10/14/2024
MEDIUM4.2PyPI
GHSA-g3r5-72hf-p7p2· CVE-2024-2260, PYSEC-2024-254zenml Session Fixation vulnerability
Modified: 6/13/2025
MEDIUM5.4PyPI
GHSA-j3vq-pmp5-r5xj· CVE-2024-4311, PYSEC-2026-2070Missing ratelimit on passwrod resets in zenml
Modified: 7/7/2026
LOW3.3PyPI
GHSA-j527-v579-m98h· CVE-2024-2213, PYSEC-2024-193Improper authentication in zenml
Modified: 10/16/2025
MEDIUM4.3PyPI
GHSA-mq73-g4qr-fgcq· CVE-2024-2383, PYSEC-2024-194Clickjacking in zenml
Modified: 1/21/2025
MEDIUM6.3PyPI
GHSA-q92x-2x5g-h365· CVE-2025-8406, PYSEC-2026-2071ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-vf7j-cmrj-pmmm· CVE-2024-25723, PYSEC-2026-2072ZenML Server Remote Privilege Escalation Vulnerability
Modified: 7/7/2026
LOW3.4PyPI
GHSA-vwgf-7f9h-h499· CVE-2024-2171, PYSEC-2024-170Cross site scripting in zenml
Modified: 1/21/2025
LOW3.1PyPI
PYSEC-2024-105· CVE-2024-2032, GHSA-c546-8jmq-hprjModified: 6/10/2026
MEDIUM6.5PyPI
PYSEC-2024-169· CVE-2024-2035, GHSA-9x88-4jg8-4vf7Modified: 6/10/2026
MEDIUM4.8PyPI
PYSEC-2024-170· CVE-2024-2171, GHSA-vwgf-7f9h-h499Modified: 6/10/2026
MEDIUM6.1PyPI
PYSEC-2024-176· CVE-2024-5062, GHSA-3434-hc3m-8mmmModified: 6/10/2026
LOW3.3PyPI
PYSEC-2024-193· CVE-2024-2213, GHSA-j527-v579-m98hModified: 6/10/2026
MEDIUM6.1PyPI
PYSEC-2024-194· CVE-2024-2383, GHSA-mq73-g4qr-fgcqModified: 6/10/2026
CRITICAL9.9PyPI
PYSEC-2024-247· CVE-2024-2083, GHSA-6h3f-43vq-53hjModified: 6/10/2026
MEDIUM4.2PyPI
PYSEC-2024-254· CVE-2024-2260, GHSA-g3r5-72hf-p7p2Modified: 6/10/2026
—PyPI
PYSEC-2025-57· CVE-2024-9340, GHSA-6gmf-2369-c76cModified: 6/10/2026
MEDIUM4.3PyPI
PYSEC-2026-2068· CVE-2024-4460, GHSA-7gjr-hcc3-xfr4Improper line feed handling in zenml
Modified: 7/7/2026
LOW3.9PyPI
PYSEC-2026-2069· CVE-2024-4680, GHSA-99hm-86h7-gr3gzenml-io/zenml does not expire the session after password reset
Modified: 7/7/2026
MEDIUM5.4PyPI
PYSEC-2026-2070· CVE-2024-4311, GHSA-j3vq-pmp5-r5xjMissing ratelimit on passwrod resets in zenml
Modified: 7/7/2026
MEDIUM6.3PyPI
PYSEC-2026-2071· CVE-2025-8406, GHSA-q92x-2x5g-h365ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-2072· CVE-2024-25723, GHSA-vf7j-cmrj-pmmmZenML Server Remote Privilege Escalation Vulnerability
Modified: 7/7/2026