https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:07:29.509554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-2383 CVE-2024-2383 — Clickjacking Vulnerability in zenml-io/zenml 2026-10-02T16:07:29.511258+00:00

Affected: zenml-io/zenml, zenml-io zenml

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker's control. The issue was addressed in version 0.56.3.

 https://cve.radiocsirt.org/vuln/ghsa-mq73-g4qr-fgcq GHSA-mq73-g4qr-fgcq — Clickjacking in zenml 2026-10-02T16:07:29.511323+00:00

Affected: PyPI: zenml

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker's control. The issue was addressed in version 0.56.3.