LF
Vendor
Lfprojects
115
CVEs
1
On KEV
0
New 30D
Products
ML10.0
Mlflow
Lfprojects
77 CVEs1 on KEV0 new
VA9.9
Valkey
Lfprojects
5 CVEs0 on KEV0 new
MP8.1
Mcp Python Sdk
Lfprojects
4 CVEs0 on KEV0 new
MC9.1
Model Context Protocol Servers
Lfprojects
4 CVEs0 on KEV0 new
AP7.8
Apptainer
Lfprojects
3 CVEs0 on KEV0 new
MG8.1
Mcp GO Sdk
Lfprojects
3 CVEs0 on KEV0 new
MR5.4
Mcp Registry
Lfprojects
3 CVEs0 on KEV0 new
MT8.1
Mcp Typescript Sdk
Lfprojects
3 CVEs0 on KEV0 new
MJ6.1
Mcp Java Sdk
Lfprojects
2 CVEs0 on KEV0 new
MI7.5
Minder
Lfprojects
2 CVEs0 on KEV0 new
ZA8.2
Zarf
Lfprojects
2 CVEs0 on KEV0 new
AG6.5
Agentgateway
Lfprojects
1 CVEs0 on KEV0 new
CP2.8
Case Python Utilities
Lfprojects
1 CVEs0 on KEV0 new
CL2.8
Cdo Local Uuid Utility
Lfprojects
1 CVEs0 on KEV0 new
MR5.9
Mcp Ruby Sdk
Lfprojects
1 CVEs0 on KEV0 new
MO8.8
Modelina
Lfprojects
1 CVEs0 on KEV0 new
VA7.5
Valkey-bloom
Lfprojects
1 CVEs0 on KEV0 new
VP7.5
Vector Packet Processor
Lfprojects
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-64849 In wildKEV | ML Mlflow Lfprojects | 9.3 | Aug 17 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) |
| CVE-2026-59950 | MP Mcp Python Sdk Lfprojects | 8.1 | Jul 15 | MCP Python SDK: WebSocket server transport does not support Host/Origin validation |
| CVE-2026-52870 | MP Mcp Python Sdk Lfprojects | 7.6 | Jul 15 | MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks |
| CVE-2026-52869 | MP Mcp Python Sdk Lfprojects | 7.1 | Jul 15 | MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal |
| CVE-2026-8147 | ML Mlflow Lfprojects | 8.1 | Jul 2 | Authorization Bypass in mlflow/mlflow |
| CVE-2026-13484 | ML Mlflow Lfprojects | 8.8 | Jun 28 | MLflow Experiment-scoped Label Schema CRUD API authorization |
| CVE-2026-10803 | ML Mlflow Lfprojects | 3.6 | Jun 4 | MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash |
| CVE-2026-4035 | ML Mlflow Lfprojects | 7.7 | Jun 3 | Environment Variable Resolution Vulnerability in mlflow/mlflow |
| CVE-2026-3198 | ML Mlflow Lfprojects | 6.5 | Jun 2 | Improper Access Control in mlflow/mlflow |
| CVE-2026-2651 | ML Mlflow Lfprojects | 9.0 | May 25 | Missing Authorization Validation in mlflow/mlflow |
| CVE-2026-2734 | ML Mlflow Lfprojects | 6.5 | May 21 | Authorization Bypass in SearchModelVersions in mlflow/mlflow |
| CVE-2026-2611 | ML Mlflow Lfprojects | 9.6 | May 19 | Improper Origin Validation in mlflow/mlflow |
| CVE-2026-4137 | ML Mlflow Lfprojects | 7.8 | May 18 | Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow |
| CVE-2026-2652 | ML Mlflow Lfprojects | 8.6 | May 15 | Authentication Bypass in mlflow/mlflow |
| CVE-2026-44428 | MR Mcp Registry Lfprojects | 4.7 | May 14 | MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience |
| CVE-2026-44429 | MR Mcp Registry Lfprojects | 5.4 | May 14 | MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl` |
| CVE-2026-44430 | MR Mcp Registry Lfprojects | 4.0 | May 14 | MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist |
| CVE-2026-2614 | ML Mlflow Lfprojects | 7.5 | May 11 | Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow |
| CVE-2026-2393 | ML Mlflow Lfprojects | 7.1 | May 11 | Server-Side Request Forgery (SSRF) in mlflow/mlflow |
| CVE-2026-40090 | ZA Zarf Lfprojects | 7.1 | Apr 14 | Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write |
| CVE-2026-35568 | MJ Mcp Java Sdk Lfprojects | 5.7 | Apr 7 | MCP Java-SDK has a DNS Rebinding Vulnerability |
| CVE-2026-33866 | ML Mlflow Lfprojects | 4.3 | Apr 7 | Authorization Bypass in MLflow AJAX Endpoint |
| CVE-2026-33865 | ML Mlflow Lfprojects | 5.4 | Apr 7 | Stored XSS via unsafe YAML parsing in MLflow |
| CVE-2026-0545 | ML Mlflow Lfprojects | 9.8 | Apr 3 | Missing Authentication for Critical Function in mlflow/mlflow |
| CVE-2026-34742 | MG Mcp GO Sdk Lfprojects | 8.1 | Apr 2 | Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost |
| CVE-2026-34237 | MJ Mcp Java Sdk Lfprojects | 6.1 | Mar 31 | MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) |
| CVE-2026-0596 | ML Mlflow Lfprojects | 7.8 | Mar 31 | Command Injection in mlflow/mlflow |
| CVE-2025-15379 | ML Mlflow Lfprojects | 10.0 | Mar 30 | Command Injection in mlflow/mlflow |
| CVE-2025-15036 | ML Mlflow Lfprojects | 10.0 | Mar 30 | Path Traversal Vulnerability in mlflow/mlflow |
| CVE-2026-33946 | MR Mcp Ruby Sdk Lfprojects | 5.9 | Mar 27 | MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay |
| CVE-2025-15381 | ML Mlflow Lfprojects | 7.1 | Mar 27 | Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow |
| CVE-2026-33252 | MG Mcp GO Sdk Lfprojects | 6.5 | Mar 23 | MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion |
| CVE-2025-15031 | ML Mlflow Lfprojects | 9.1 | Mar 18 | Path Traversal Vulnerability in mlflow/mlflow |
| CVE-2025-14287 | ML Mlflow Lfprojects | 8.8 | Mar 15 | Command Injection in mlflow/mlflow |
| CVE-2026-29791 | AG Agentgateway Lfprojects | 6.5 | Mar 6 | Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion |
| CVE-2026-29064 | ZA Zarf Lfprojects | 8.2 | Mar 6 | Zarf: Symlink targets in archives are not validated against destination directory |
| CVE-2026-27896 | MG Mcp GO Sdk Lfprojects | 7.5 | Feb 26 | MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity |
| CVE-2026-27735 | MC Model Context Protocol Servers Lfprojects | 6.5 | Feb 25 | mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries |
| CVE-2026-21864 | VA Valkey-bloom Lfprojects | 7.5 | Feb 24 | Remote DoS from malformed RESTORE command |
| CVE-2026-27623 | VA Valkey Lfprojects | 7.5 | Feb 23 | Valkey has Pre-Authentication DOS from malformed RESP request |
| CVE-2026-21863 | VA Valkey Lfprojects | 7.5 | Feb 23 | Malformed Valkey Cluster bus message can lead to Remote DoS |
| CVE-2025-67733 | VA Valkey Lfprojects | 7.1 | Feb 23 | Valkey Affected by RESP Protocol Injection via Lua error_reply |
| CVE-2026-25536 | MT Mcp Typescript Sdk Lfprojects | 7.1 | Feb 4 | @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse |
| CVE-2025-10279 | ML Mlflow Lfprojects | 7.0 | Feb 2 | Privilege Escalation in mlflow/mlflow |
| CVE-2025-14279 | ML Mlflow Lfprojects | 8.1 | Jan 12 | MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header validation in the MLFlow REST server |
| CVE-2026-0621 | MT Mcp Typescript Sdk Lfprojects | 7.5 | Jan 5 | MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS |
| CVE-2025-68145 | MC Model Context Protocol Servers Lfprojects | 9.1 | Dec 17 | In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate… |
| CVE-2025-68144 | MC Model Context Protocol Servers Lfprojects | 7.1 | Dec 17 | In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization |
| CVE-2025-68143 | MC Model Context Protocol Servers Lfprojects | 8.8 | Dec 17 | Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) |
| CVE-2025-66416 | MP Mcp Python Sdk Lfprojects | 8.1 | Dec 2 | The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP) |
| CVE-2025-66414 | MT Mcp Typescript Sdk Lfprojects | 8.1 | Dec 2 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients |
| CVE-2025-65105 | AP Apptainer Lfprojects | 5.3 | Dec 2 | Apptainer is an open source container platform |
| CVE-2025-11201 | ML Mlflow Lfprojects | 9.8 | Oct 29 | MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability |
| CVE-2025-11200 | ML Mlflow Lfprojects | 9.8 | Oct 29 | MLflow Weak Password Requirements Authentication Bypass Vulnerability |
| CVE-2025-49844 | VA Valkey Lfprojects | 9.9 | Oct 3 | Redis is an open source, in-memory database that persists on disk |
| CVE-2025-21605 | VA Valkey Lfprojects | 7.5 | Apr 23 | Redis is an open source, in-memory database that persists on disk |
| CVE-2025-1474 | ML Mlflow Lfprojects | 5.5 | Mar 20 | In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password |
| CVE-2025-1473 | ML Mlflow Lfprojects | 7.1 | Mar 20 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1 |
| CVE-2025-0453 | ML Mlflow Lfprojects | 7.5 | Mar 20 | In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack |
| CVE-2024-8859 | ML Mlflow Lfprojects | 7.5 | Mar 20 | A path traversal vulnerability exists in mlflow/mlflow version 2.15.1 |