[BUG]: Rate limiting Vulnerability

[rook1337]

Contact Details [Optional]

No response

System Information

Linux

What happened?

Hello team,
Please check here for full detailed report:- https://huntr.com/bounties/0674977f-5fd0-4af6-b4d1-40186a6a4da7/

Reproduction steps

...

Relevant log output

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[stefannica]

As explained in the attached report, the ZenML built-in username + password authentication scheme is not meant to be used in production environments. For production settings, ZenML needs to be hooked up to an external authenticator that takes on the responsibilities of implementing more secure authentication schemes and enforcing best security practices like rate limiting, password strength and expiration etc.