6196 matches found
Directory Traversal
Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...
Directory Traversal
Overview zenml is a ZenML: Write production-ready ML code. Affected versions of this package are vulnerable to Directory Traversal via the load function in the PathMaterializer class during extraction of data.tar.gz archives. An attacker can overwrite arbitrary files, potentially leading to comma...
GHSA-Q92X-2X5G-H365 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
RLSA-2025:9431 Moderate: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...
EUVD-2024-54315
Malicious code in bioql PyPI...
EUVD-2023-36917
Malicious code in bioql PyPI...
EUVD-2022-1458
Malicious code in bioql PyPI...
EUVD-2022-3332
Malicious code in bioql PyPI...
EUVD-2023-36564
Malicious code in bioql PyPI...
EUVD-2022-30029
Malicious code in bioql PyPI...
EUVD-2022-51003
Malicious code in bioql PyPI...
EUVD-2024-1952
Malicious code in bioql PyPI...
EUVD-2025-7031
Malicious code in bioql PyPI...
EUVD-2025-30961
Malicious code in bioql PyPI...
EUVD-2023-44052
Malicious code in bioql PyPI...
EUVD-2022-2004
Malicious code in bioql PyPI...
EUVD-2025-11984
Malicious code in bioql PyPI...
EUVD-2021-7640
Malicious code in bioql PyPI...