PyPI/zenml CVE-2024-4680: low 3.9, EPSS 0.41%
zenml-io/zenml does not expire the session after password reset
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.56.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-99hm-86h7-gr3g
- https://nvd.nist.gov/vuln/detail/CVE-2024-4680
- https://github.com/zenml-io/zenml
- https://huntr.com/bounties/c88f6bd2-490d-4930-98dd-03651b20230a
CVE-2024-4680 · published · modified · JSON