Directory traversal in zenml
PyPI zenml · Upgrade to 0.55.5 or later · < 0.55.5 · CVE-2024-2083 · GHSA-6h3f-43vq-53hj · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI zenml · Upgrade to 0.55.5 or later · < 0.55.5 · CVE-2024-2083 · GHSA-6h3f-43vq-53hj · amended
PyPI mlflow · Upgrade to 2.12.1 or later · <= 2.9.2 · CVE-2024-1558 · GHSA-j62r-wxqq-f3gf · amended
PyPI gradio · Upgrade to 4.13.0 or later · < 4.13.0 · CVE-2024-1561 · GHSA-g9cj-cfpp-4g2x · amended
PyPI mlflow · Upgrade to 2.12.1 or later · <= 2.9.2 · CVE-2024-1483 · GHSA-f82r-jj5r-6g97 · amended
PyPI gunicorn · Upgrade to 22.0.0 or later · < 22.0.0 · CVE-2024-1135 · GHSA-w3h3-4rj7-4ph4 · amended
PyPI sqlparse · Upgrade to 0.5.0 or later · < 0.5.0 · CVE-2024-4340 · GHSA-2m57-hf25-phgg · amended
npm @aws-amplify/cli · Upgrade to 12.10.1 or later · < 12.10.1 · CVE-2024-28056 · GHSA-846g-p7hm-f54r · amended
Packagist winter/wn-dusk-plugin · Upgrade to 2.1.0 or later · < 2.1.0 · CVE-2024-32003 · GHSA-chcp-g9j5-3xxx
PyPI nicegui · Upgrade to 1.4.21 or later · >= 1.4.6, < 1.4.21 · CVE-2024-32005 · GHSA-mwc7-64wg-pgvj · amended
Packagist mautic/core · Upgrade to 5.0.4 or 4.4.12 by release line · >= 1.0.2, < 4.4.12; >= 5.0.0-alpha, < 5.0.4 · CVE-2022-25776 · GHSA-qjx3-2g35-6hv8
Packagist mautic/core · Upgrade to 5.0.4 or 4.4.12 by release line · >= 3.3.0, < 4.4.12; >= 5.0.0-alpha, < 5.0.4 · CVE-2021-27916 · GHSA-9fcx-cv56-w58p
Go github.com/traefik/traefik · Upgrade to 2.11.2 or later · <= 2.11.1 · +2 more packages · CVE-2024-28869 · GHSA-4vwx-54mw-vqfw
Packagist timber/timber · Upgrade to 2.1.0, 1.24.1 or 1.23.1 by release line · >= 2.0.0, <= 2.0.0; >= 1.24.0, <= 1.24.0; >= 0.16.6, < 1.23.1 · CVE-2024-29800 · GHSA-6363-v5m4-fvq3
Maven org.apache.kafka:kafka-metadata · Upgrade to 3.6.2 or later · >= 3.5.0, < 3.6.2 · CVE-2024-27309 · GHSA-79vv-vp32-gpp7
Go github.com/tiagorlampert/CHAOS · Upgrade to 0.0.0-20220716132853-b47438d36e3a (pre-release) or later · < 0.0.0-20220716132853-b47438d36e3a · CVE-2024-30850 · GHSA-p3j6-f45h-hw5f
Packagist mautic/core · Upgrade to 4.4.12 or later · >= 1.0.0-beta2, < 4.4.12 · CVE-2021-27915 · GHSA-2rc5-2755-v422
npm mysql2 · Upgrade to 3.9.4 or later · < 3.9.4 · CVE-2024-21508 · GHSA-fpw7-j2hg-69v5 · amended
Packagist wwbn/avideo · Upgrade to 14.3 or later · >= 12.4, <= 14.2 · CVE-2024-31819 · GHSA-mv5w-wr5c-575p
PyPI llama-index-core · Upgrade to 0.10.24 or later · < 0.10.24 · CVE-2024-3098 · GHSA-wvpx-g427-q9wc · amended
PyPI litellm · Upgrade to 1.34.42 or later · < 1.34.42 · CVE-2024-2952 · GHSA-46cm-pfwv-cgf8 · amended
Go github.com/go-skynet/LocalAI · Upgrade to 2.10.0 or later · < 2.10.0 · CVE-2024-2029 · GHSA-wx43-g55g-2jf4
Maven org.xwiki.platform:xwiki-platform-uiextension-api · Upgrade to 15.9-rc-1 (pre-release), 15.5.4 or 14.10.19 by release line · < 14.10.19; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.9-rc-1 · CVE-2024-31997 · GHSA-c2gg-4gq4-jv5j
{ in Velocity escapetool allows remote code executionMaven org.xwiki.commons:xwiki-commons-velocity · Upgrade to 15.9-rc-1 (pre-release), 15.5.4 or 14.10.19 by release line · >= 3.0.1, < 14.10.19; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.9-rc-1 · CVE-2024-31996 · GHSA-hf43-47q4-fhq5
npm @fastify/secure-session · Upgrade to 7.3.0 or later · < 7.3.0 · CVE-2024-31999 · GHSA-9wwp-q7wq-jx35 · amended
Maven org.xwiki.platform:xwiki-platform-realtime-ui · Upgrade to 15.9, 15.5.4 or 14.10.19 by release line · >= 13.9-rc-1, < 14.10.19; >= 15.0-rc-1, < 15.5.4; >= 15.6-rc-1, < 15.9 · CVE-2024-31988 · GHSA-r5vh-gc3r-r24w
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.