PatchTheCVEzenml vulnerabilities and fixes
Recent CVEs affecting zenml, with upgrade or downgrade steps. 10 tracked.
zenml has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-10-05. Highest priority: CVE-2024-9340 (score 52/100).
- CVE-2025-8406 HIGH 7.8 UPGRADE ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class
- CVE-2024-9340 HIGH 7.5 UPGRADE A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to c
- CVE-2024-5062 MEDIUM 6.1 UPGRADE A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml version 0.57.1
- CVE-2024-4680 HIGH 8.8 DOWNGRADE A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session
- CVE-2024-4311 MEDIUM 5.4 DOWNGRADE zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the pas
- CVE-2024-2383 MEDIUM 6.1 UPGRADE A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the applicati
- CVE-2024-2213 LOW 3.3 UPGRADE An issue was discovered in zenml-io/zenml versions up to and including 0.55.4
- CVE-2024-2171 MEDIUM 4.8 UPGRADE A stored Cross-Site Scripting (XSS) vulnerability was identified in the zenml-io/zenml repository, specificall
- CVE-2024-2035 MEDIUM 6.5 UPGRADE An improper authorization vulnerability exists in the zenml-io/zenml repository, specifically within the API P
- CVE-2024-2032 LOW 3.1 UPGRADE A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for
FAQ
How do I fix zenml vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zenml being exploited right now?
None of the tracked zenml CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zenml CVE should I patch first?
CVE-2024-9340 currently ranks highest (52/100): A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to c.