https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:07:24 +0000 https://cve.radiocsirt.org/vuln/cve-2024-2383 <p><strong>Affected:</strong> zenml-io/zenml, zenml-io zenml</p> <p>A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application&#39;s failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker&#39;s control. The issue was addressed in version 0.56.3.</p> <p><strong>Affected:</strong> zenml-io/zenml, zenml-io zenml</p> <p>A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application&#39;s failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker&#39;s control. The issue was addressed in version 0.56.3.</p> https://cve.radiocsirt.org/vuln/cve-2024-2383 https://cve.radiocsirt.org/vuln/ghsa-mq73-g4qr-fgcq <p><strong>Affected:</strong> PyPI: zenml</p> <p>A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application&#39;s failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker&#39;s control. The issue was addressed in version 0.56.3.</p> <p><strong>Affected:</strong> PyPI: zenml</p> <p>A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application&#39;s failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious page, potentially leading to unauthorized actions by tricking users into interacting with the interface under the attacker&#39;s control. The issue was addressed in version 0.56.3.</p> https://cve.radiocsirt.org/vuln/ghsa-mq73-g4qr-fgcq