258 matches found
Directory Traversal
Overview zenml is a ZenML: Write production-ready ML code. Affected versions of this package are vulnerable to Directory Traversal via the load function in the PathMaterializer class during extraction of data.tar.gz archives. An attacker can overwrite arbitrary files, potentially leading to comma...
GHSA-Q92X-2X5G-H365 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
EUVD-2023-44595
Malicious code in bioql PyPI...
EUVD-2023-44211
Malicious code in bioql PyPI...
EUVD-2023-44214
Malicious code in bioql PyPI...
EUVD-2023-44217
Malicious code in bioql PyPI...
EUVD-2023-44286
Malicious code in bioql PyPI...
EUVD-2022-35688
Malicious code in bioql PyPI...
EUVD-2023-44392
Malicious code in bioql PyPI...
EUVD-2023-44208
Malicious code in bioql PyPI...
EUVD-2023-44212
Malicious code in bioql PyPI...
EUVD-2023-44215
Malicious code in bioql PyPI...
EUVD-2023-44594
Malicious code in bioql PyPI...
EUVD-2023-44200
Malicious code in bioql PyPI...
EUVD-2023-44210
Malicious code in bioql PyPI...
EUVD-2023-44213
Malicious code in bioql PyPI...
EUVD-2023-44199
Malicious code in bioql PyPI...
EUVD-2023-44216
Malicious code in bioql PyPI...