Do Son Identified as CVE-2024-31861, this flaw gives attackers a way to inject malicious code through Zeppelin's Shell interpreter
Apache Zeppelin
The most severe of these issues is CVE-2021-28655 (CVSS: 8.2), an arbitrary file deletion vulnerability in the "Move folder to Trash" feature