CVE-2025-71459

Name of the Vulnerable Software and Affected Versions Zipline versions prior to 4.3.3

Description Authenticated uploaders can write files outside the intended upload directory by providing traversal sequences in the x-zipline-filename header. Attackers utilizing the local datasource can create or overwrite files that the Zipline process has permission to write, which may lead to application data corruption or service disruption. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations Update Zipline to version 4.3.3 or later.