Lucene search
+L

8 matches found

OSV
OSV
added 2026/07/07 4:3 p.m.12 views

PYSEC-2026-2071 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class

ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...

6.3CVSS6.9AI score0.00334EPSS
SaveExploits1References6
Rows per page
Query Builder