ZenML

ZenML across Glyph

• Security advisories
• Paydays: Pay schedule
• Official socials

ZenML across Glyph: timeline

1. 2025-10-05 ZenML is vulnerable to Path Traversal through its `PathMaterializer` class (Advisories)
2. 2025-03-20 ZenML unauthenticated DoS via Multipart Boundry (Advisories)
3. 2024-11-14 Missing ratelimit on passwrod resets in zenml (Advisories)
4. 2024-06-30 Reflected Cross-Site Scripting (XSS) in zenml (Advisories)
5. 2024-06-24 Improper line feed handling in zenml (Advisories)
6. 2024-06-08 zenml-io/zenml does not expire the session after password reset (Advisories)
7. 2024-06-06 Cross site scripting in zenml (Advisories)
8. 2024-06-06 Clickjacking in zenml (Advisories)
9. 2024-06-06 Improper authentication in zenml (Advisories)
10. 2024-06-06 Race condition in zenml (Advisories)
11. 2024-06-06 Improper authorization in zenml (Advisories)
12. 2024-04-16 zenml Session Fixation vulnerability (Advisories)
13. 2024-04-16 Directory traversal in zenml (Advisories)
14. 2024-02-27 ZenML Server Remote Privilege Escalation Vulnerability (Advisories)

Sources

• advisories.fru.dev/companies/zenml