Latest vulnerabilities for vendor "lfprojects"

mcp MCP Python SDKMCP Python SDK: WebSocket server transport does not support Host/Origin validation

Risk 59

Severity

7.6

First published (updated )

CVE-2026-59950

pypi/mcpMCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

Risk 61

Severity

7.6

First published (updated )

CVE-2026-52870

pypi/mcpMCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

Risk 61

Severity

7.1

First published (updated )

CVE-2026-52869

MLflow MLflowAuthorization Bypass in mlflow/mlflow

Risk 60

Severity

8.1

First published (updated )

CVE-2026-8147

MLflow MLflow Experiment-scoped Label Schema CRUD APIMLflow Experiment-scoped Label Schema CRUD API authorization

Risk 79

Severity

1.3

First published (updated )

CVE-2026-13484

pypi/mlflowMLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash

Risk 25

Severity

1.1

First published (updated )

CVE-2026-10803

pypi/mlflowEnvironment Variable Resolution Vulnerability in mlflow/mlflow

Risk 66

Severity

7.7

First published (updated )

CVE-2026-4035

pypi/mlflowImproper Access Control in mlflow/mlflow

Risk 38

Severity

6.5

First published (updated )

CVE-2026-3198

pypi/mlflowMissing Authorization Validation in mlflow/mlflow

Risk 74

Severity

9

First published (updated )

CVE-2026-2651

pypi/mlflowAuthorization Bypass in SearchModelVersions in mlflow/mlflow

Risk 38

Severity

6.5

First published (updated )

CVE-2026-2734

pypi/mlflowImproper Origin Validation in mlflow/mlflow

Risk 80

Severity

9.6

First published (updated )

CVE-2026-2611

pypi/mlflowIncomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

Risk 69

Severity

7.8

First published (updated )

CVE-2026-4137

pypi/mlflowAuthentication Bypass in mlflow/mlflow

Risk 64

Severity

8.6

First published (updated )

CVE-2026-2652

pypi/mlflowArbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Risk 43

Severity

7.5

First published (updated )

CVE-2026-2614

pypi/mlflowServer-Side Request Forgery (SSRF) in mlflow/mlflow

Risk 48

Severity

7.1

First published (updated )

CVE-2026-2393

go/github.com/modelcontextprotocol/registryMCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist

Risk 30

Severity

6.3

First published (updated )

CVE-2026-44430

go/github.com/modelcontextprotocol/registryMCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`

Risk 34

Severity

5.1

First published (updated )

CVE-2026-44429

go/github.com/modelcontextprotocol/registryMCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience

Risk 24

Severity

2.1

First published (updated )

CVE-2026-44428

go/github.com/zarf-dev/zarfZarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write

Risk 47

Severity

7.1

First published (updated )

CVE-2026-40090

maven/io.modelcontextprotocol.sdk:mcp-coreMCP Java-SDK has a DNS Rebinding Vulnerability

Risk 55

Severity

7.6

First published (updated )

CVE-2026-35568

pip/mlflowAuthorization Bypass in MLflow AJAX Endpoint

Risk 26

Severity

5.3

First published (updated )

CVE-2026-33866

pip/mlflowStored XSS via unsafe YAML parsing in MLflow

Risk 34

Severity

5.1

First published (updated )

CVE-2026-33865

pip/mlflowMissing Authentication for Critical Function in mlflow/mlflow

Risk 86

Severity

9.8

First published (updated )

CVE-2026-0545

go/github.com/modelcontextprotocol/go-sdkModel Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost

Risk 59

Severity

7.6

First published (updated )

CVE-2026-34742

pypi/mlflowCommand Injection in mlflow/mlflow

Risk 81

Severity

7.8

First published (updated )

CVE-2026-0596

maven/io.modelcontextprotocol.sdk:mcp-coreMCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)

Risk 38

Severity

6.1

First published (updated )

CVE-2026-34237

pypi/mlflowCommand Injection in mlflow/mlflow

Risk 87

Severity

9.8

First published (updated )

CVE-2025-15379

pypi/mlflowPath Traversal Vulnerability in mlflow/mlflow

Risk 87

Severity

10

First published (updated )

CVE-2025-15036

rubygems/mcpMCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay

Risk 31

Severity

8.2

EPSS

0.05%

First published (updated )

CVE-2026-33946

pypi/mlflowUnauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

Risk 60

Severity

8.1

First published (updated )

CVE-2025-15381

Trending

Vendor Risk Score

Software

mcp MCP Python SDKMCP Python SDK: WebSocket server transport does not support Host/Origin validation

pypi/mcpMCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

pypi/mcpMCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

MLflow MLflowAuthorization Bypass in mlflow/mlflow

MLflow MLflow Experiment-scoped Label Schema CRUD APIMLflow Experiment-scoped Label Schema CRUD API authorization

Don't miss critical vulnerabilities

pypi/mlflowMLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash

pypi/mlflowEnvironment Variable Resolution Vulnerability in mlflow/mlflow

pypi/mlflowImproper Access Control in mlflow/mlflow

pypi/mlflowMissing Authorization Validation in mlflow/mlflow

pypi/mlflowAuthorization Bypass in SearchModelVersions in mlflow/mlflow

Don't miss critical vulnerabilities

pypi/mlflowImproper Origin Validation in mlflow/mlflow

pypi/mlflowIncomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

pypi/mlflowAuthentication Bypass in mlflow/mlflow

pypi/mlflowArbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

pypi/mlflowServer-Side Request Forgery (SSRF) in mlflow/mlflow

Don't miss critical vulnerabilities

go/github.com/modelcontextprotocol/registryMCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist

go/github.com/modelcontextprotocol/registryMCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`

go/github.com/modelcontextprotocol/registryMCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience

go/github.com/zarf-dev/zarfZarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write

maven/io.modelcontextprotocol.sdk:mcp-coreMCP Java-SDK has a DNS Rebinding Vulnerability

Don't miss critical vulnerabilities

pip/mlflowAuthorization Bypass in MLflow AJAX Endpoint

pip/mlflowStored XSS via unsafe YAML parsing in MLflow

pip/mlflowMissing Authentication for Critical Function in mlflow/mlflow

go/github.com/modelcontextprotocol/go-sdkModel Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost

pypi/mlflowCommand Injection in mlflow/mlflow

Don't miss critical vulnerabilities

maven/io.modelcontextprotocol.sdk:mcp-coreMCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)

pypi/mlflowCommand Injection in mlflow/mlflow

pypi/mlflowPath Traversal Vulnerability in mlflow/mlflow

rubygems/mcpMCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay

pypi/mlflowUnauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

Don't miss critical vulnerabilities

Company

Resources

Contact