https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:34:48.941503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-247567 EUVD-2026-247567 2026-10-02T19:34:49.015756+00:00 EUVD-2026-247567 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9340 fkie_cve-2024-9340 2026-10-02T19:34:49.015795+00:00

A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundary processing mechanism leads to an infinite loop, resulting in a complete denial of service for all users. Affected endpoints include `/api/v1/login` and `/api/v1/device_authorization`.

 https://cve.radiocsirt.org/vuln/ghsa-6gmf-2369-c76c GHSA-6gmf-2369-c76c — ZenML unauthenticated DoS via Multipart Boundry 2026-10-02T19:34:49.015845+00:00

Affected: PyPI: zenml

A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundary processing mechanism leads to an infinite loop, resulting in a complete denial of service for all users. Affected endpoints include `/api/v1/login` and `/api/v1/device_authorization`.

 https://cve.radiocsirt.org/vuln/pysec-2025-57 PYSEC-2025-57 2026-10-02T19:34:49.015872+00:00

Affected: PyPI: zenml

A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundary processing mechanism leads to an infinite loop, resulting in a complete denial of service for all users. Affected endpoints include `/api/v1/login` and `/api/v1/device_authorization`.