Lucene search
+L

11 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•24 views

ZenML is vulnerable to Path Traversal through its `PathMaterializer` class

ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...

7.8CVSS7AI score0.00365EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder