How many CVEs have patched update_user?

3 published CVEs changed update_user in zenml-io/zenml, in 8 distinct patches totalling 228 changed lines, between 2024 and 2024.

What is the latest CVE that changed update_user?

CVE-2024-4311 (Lack of login attempt rate-limiting in zenml-io/zenml), published 2024-11-14, changed lines 249 to 302 of src/zenml/zen_server/routers/users_endpoints.py.

How does update_user compare to the rest of zenml-io/zenml?

zenml-io/zenml has 13 CVEs with a located fix in total; 3 of them changed update_user.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

zenml-io/zenml

Function

5 files

update_user

Name: update_user in zenml-io/zenml: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 5 files

Last patched November 14, 2024

CVEs

That changed this function

Distinct patches

Backports counted once

228

Lines changed

Added plus removed

2024

Years

By CVE publication date

Overview

update_user in zenml-io/zenml was changed by 3 published CVE fixes in 2024, in 8 distinct patches that added or removed 228 lines in total.

The name occurs in 5 files: src/zenml/zen_server/routers/users_endpoints.py, src/zenml/client.py, src/zenml/cli/user_management.py, src/zenml/zen_stores/schemas/user_schemas.py, src/zenml/zen_stores/sql_zen_store.py.

zenml-io/zenml has 13 CVEs with a located fix in total, so 23% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed update_user, newest first, with the lines each fix touched.

Lack of login attempt rate-limiting in zenml-io/zenml
CVE-2024-4311 · src/zenml/zen_server/routers/users_endpoints.py · lines 249–302 · +11 −7 in 3 hunks
Medium · CVSS 5.4
EPSS 0.5%2024-11-14
Improper Authorization in zenml-io/zenml
CVE-2024-2035 · src/zenml/client.py · lines 808–844 · +8 −0 in 3 hunks
Medium · CVSS 6.5
EPSS 0.6%2024-06-06
Improper Authorization in zenml-io/zenml
CVE-2024-2035 · src/zenml/zen_server/routers/users_endpoints.py · lines 253–278 · +22 −1
Medium · CVSS 6.5
EPSS 0.6%2024-06-06
Improper Authorization in zenml-io/zenml
CVE-2024-2035 · src/zenml/zen_stores/sql_zen_store.py · lines 7517–7524 · +8 −0
Medium · CVSS 6.5
EPSS 0.6%2024-06-06
Improper Authentication in zenml-io/zenml
CVE-2024-2213 · src/zenml/client.py · lines 817–841 · +9 −0 in 2 hunks
Low · CVSS 3.3
EPSS 0.2%2024-06-06
Improper Authentication in zenml-io/zenml
CVE-2024-2213 · src/zenml/cli/user_management.py · lines 259–420 · +128 −3 in 3 hunks
Low · CVSS 3.3
EPSS 0.2%2024-06-06
Improper Authentication in zenml-io/zenml
CVE-2024-2213 · src/zenml/zen_server/routers/users_endpoints.py · lines 257–293 · +27 −1 in 2 hunks
Low · CVSS 3.3
EPSS 0.2%2024-06-06
Improper Authentication in zenml-io/zenml
CVE-2024-2213 · src/zenml/zen_stores/schemas/user_schemas.py · lines 209–211 · +3 −0
Low · CVSS 3.3
EPSS 0.2%2024-06-06

Get an alert when the next CVE fix lands in zenml-io/zenml, with the patched functions.

Monitor zenml CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in zenml-io/zenml changed by the most CVE fixes.

update_myself3 CVEs · src/zenml/zen_server/routers/users_endpoints.py load_model_from_metadata2 CVEs · src/zenml/artifacts/utils.py load2 CVEs · src/zenml/materializers/cloudpickle_materializer.py handle_int_env_var2 CVEs · src/zenml/constants.py get_user2 CVEs · src/zenml/zen_server/routers/users_endpoints.py

All patched functions in zenml-io/zenml

Frequently asked questions

Common questions about CVE fixes to update_user.

How many CVEs have patched update_user?: 3 published CVEs changed update_user in zenml-io/zenml, in 8 distinct patches totalling 228 changed lines, between 2024 and 2024.
What is the latest CVE that changed update_user?: CVE-2024-4311 (Lack of login attempt rate-limiting in zenml-io/zenml), published 2024-11-14, changed lines 249 to 302 of src/zenml/zen_server/routers/users_endpoints.py.
How does update_user compare to the rest of zenml-io/zenml?: zenml-io/zenml has 13 CVEs with a located fix in total; 3 of them changed update_user.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track zenml-io/zenml CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing