{"action":"Upgrade zenml to 0.55.5 or later.","affected":[{"fixed":"0.55.5","introduced":"0"}],"component":"zenml","cve_ids":["CVE-2024-2032"],"ecosystem":"PyPI","epss":0.00291,"exploited":false,"fixed_versions":["0.55.5"],"ghsa_id":"GHSA-c546-8jmq-hprj","id":"tcs_01M5KGKX2ZMGWXEKWGWZK210V5","modified_at":"2026-06-10T17:02:51.328639373Z","published_at":"2024-06-06T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-105","https://huntr.com/bounties/6199cd5d-611f-4ea9-96c5-52a952ba5a56","https://github.com/zenml-io/zenml/commit/afcaf741ef9114c9b32f722f101b97de3d8d147b","https://github.com/advisories/GHSA-c546-8jmq-hprj"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"PYSEC-2024-105","url":"https://osv.dev/vulnerability/PYSEC-2024-105"}],"summary":"A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same username when requests are sent in parallel."}