PatchTheCVEzenml vulnerabilities
Recent CVEs affecting zenml products. 4 tracked.
zenml has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-10-05. Highest priority: CVE-2024-9340 (score 52/100).
- CVE-2025-8406 HIGH 7.8 UPGRADE ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class
- CVE-2024-9340 HIGH 7.5 UPGRADE A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to c
- CVE-2024-5062 MEDIUM 6.1 UPGRADE A reflected Cross-Site Scripting (XSS) vulnerability was identified in zenml-io/zenml version 0.57.1
- CVE-2024-4311 MEDIUM 5.4 DOWNGRADE zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the pas
FAQ
How do I fix zenml vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zenml being exploited right now?
None of the tracked zenml CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zenml CVE should I patch first?
CVE-2024-9340 currently ranks highest (52/100): A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to c.