https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:34:19 +0000 https://cve.radiocsirt.org/vuln/cve-2024-2260 <p><strong>Affected:</strong> zenml-io/zenml, zenmlio zenml</p> <p>A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim&#39;s JWT token.</p> <p><strong>Affected:</strong> zenml-io/zenml, zenmlio zenml</p> <p>A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim&#39;s JWT token.</p> https://cve.radiocsirt.org/vuln/cve-2024-2260 https://cve.radiocsirt.org/vuln/ghsa-g3r5-72hf-p7p2 <p><strong>Affected:</strong> PyPI: zenml</p> <p>A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim&#39;s JWT token.</p> <p><strong>Affected:</strong> PyPI: zenml</p> <p>A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim&#39;s JWT token.</p> https://cve.radiocsirt.org/vuln/ghsa-g3r5-72hf-p7p2