Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: zenml-io/zenml 0.56.3 Clear all filters
TI-2024-02055 CVE-2024-2213 · GHSA-j527-v579-m98h

Improper Authentication in zenml-io/zenml

Priority MEDIUM 49

An issue was discovered in zenml-io/zenml versions up to and including 0.55.4.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00241 Published 2024-06-06 Fixed in 0.56.3 CWE-620
TI-2024-02214 CVE-2024-2383 · GHSA-mq73-g4qr-fgcq

Clickjacking Vulnerability in zenml-io/zenml

Priority MEDIUM 60

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00354 Published 2024-06-06 Fixed in 0.56.3 CWE-1021