Lucene search
+L

11 matches found

OSV
OSV
•added 2026/07/07 4:03 p.m.•22 views

PYSEC-2026-2071 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class

ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...

6.3CVSS7AI score0.00365EPSS
SaveExploits1References6
Rows per page
Query Builder