Skip to content
OpenAdvisories

Package · PyPI

zenml

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-2083 Public exploit EPSS 37%

    Directory Traversal in zenml-io/zenml

    A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing…

    zenml-io zenml-io/zenml zenml PyPI
  • High 8.8
    CVE-2024-25723 Public exploit Scanner template EPSS 71%

    ZenML Server Remote Privilege Escalation Vulnerability

    ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in t…

    zenml PyPI