ZenML (Python) – Support, CVEs & Health

Security

Known Vulnerabilities

10 active CVEs reported via OSV.dev

GHSA-3434-hc3m-8mmm CVSS_V3

Reflected Cross-Site Scripting (XSS) in zenml

Published: 2024-06-30 Fixed in: 0.58.0

GHSA-6gmf-2369-c76c CVSS_V3

ZenML unauthenticated DoS via Multipart Boundry

Published: 2025-03-20 Fixed in: 0.68.0

GHSA-6h3f-43vq-53hj CVSS_V3

Directory traversal in zenml

Published: 2024-04-16 Fixed in: 0.55.5

GHSA-7gjr-hcc3-xfr4 CVSS_V3

Improper line feed handling in zenml

Published: 2024-06-24 Fixed in: 0.57.1

GHSA-99hm-86h7-gr3g CVSS_V3

zenml-io/zenml does not expire the session after password reset

Published: 2024-06-08 No fix available

GHSA-9x88-4jg8-4vf7 CVSS_V3

Improper authorization in zenml

Published: 2024-06-06 Fixed in: 0.56.2

GHSA-c546-8jmq-hprj CVSS_V3

Race condition in zenml

Published: 2024-06-06 Fixed in: 0.55.5

GHSA-g3r5-72hf-p7p2 CVSS_V3

zenml Session Fixation vulnerability

Published: 2024-04-16 Fixed in: 0.56.2

GHSA-j3vq-pmp5-r5xj CVSS_V3

Missing ratelimit on passwrod resets in zenml

Published: 2024-11-14 Fixed in: 0.57.0rc2

GHSA-j527-v579-m98h CVSS_V3

Improper authentication in zenml

Published: 2024-06-06 Fixed in: 0.56.3