CVE-2025-8406
2 advisories.
PyPI/zenml CVE-2025-8406: medium 6.3, EPSS 0.36%
ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Action: Upgrade zenml to 0.84.2 or later.
pip install zenml==0.84.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.81.0 | 0.84.2 | - |
Fixed versions
| 0.84.2 |
Sources
- osv: GHSA-q92x-2x5g-h365
- https://nvd.nist.gov/vuln/detail/CVE-2025-8406
- https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398
- https://github.com/zenml-io/zenml
- https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7
CVE-2025-8406 · published · modified · JSON
PyPI/zenml CVE-2025-8406: medium 6.3, EPSS 0.36%
ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
Action: Upgrade zenml to 0.84.2 or later.
pip install zenml==0.84.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.81.0 | 0.84.2 | - |
Fixed versions
| 0.84.2 |
Sources
- osv: PYSEC-2026-2071
- https://nvd.nist.gov/vuln/detail/CVE-2025-8406
- https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398
- https://github.com/zenml-io/zenml
- https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7
- https://pypi.org/project/zenml
- https://github.com/advisories/GHSA-q92x-2x5g-h365
CVE-2025-8406 · published · modified · JSON