2688 matches found
CVE-2025-8406
ZenML 0.83.1 is affected by a path traversal flaw in PathMaterializer during data.tar.gz extraction; is_path_within_directory fails to catch symbolic/hard links, enabling arbitrary file writes and potential command execution if critical files are overwritten. Remediation present in connected docs...
CVE-2025-8406 Path Traversal in zenml-io/zenml
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
CVE-2025-8406 Path Traversal in zenml-io/zenml
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
EUVD-2021-9799
Malicious code in bioql PyPI...
EUVD-2022-42466
Malicious code in bioql PyPI...
EUVD-2022-32024
Malicious code in bioql PyPI...
EUVD-2023-0628
Malicious code in bioql PyPI...
EUVD-2024-25266
Malicious code in bioql PyPI...
EUVD-2024-31369
Malicious code in bioql PyPI...
EUVD-2024-21396
Malicious code in bioql PyPI...
EUVD-2025-18787
Malicious code in bioql PyPI...
EUVD-2024-15930
Malicious code in bioql PyPI...
EUVD-2024-46766
Malicious code in bioql PyPI...
EUVD-2024-54969
Malicious code in bioql PyPI...
EUVD-2024-48289
Malicious code in bioql PyPI...
EUVD-2024-15874
Malicious code in bioql PyPI...
EUVD-2024-20647
Malicious code in bioql PyPI...
EUVD-2022-47398
Malicious code in bioql PyPI...