Lfprojects vulnerabilities

Products

• Mlflow 78
• Valkey 5
• Mcp Python Sdk 4
• Model Context Protocol Servers 4
• Apptainer 3
• Mcp Go Sdk 3
• Mcp Registry 3
• Mcp Typescript Sdk 3
• Mcp Java Sdk 2
• Minder 2
• Zarf 2

Newest

• lfprojects mlflow MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) CVE-2026-64849 In KEVPublic exploitFix available EPSS 10.0% 9.3 CriticalAugust 17, 2026
• lfprojects mcp python sdk, modelcontextprotocol python-sdk +1 more MCP Python SDK: WebSocket server transport does not support Host/Origin validation CVE-2026-59950 Fix available 7.6 HighJuly 15, 2026
• lfprojects mcp python sdk, modelcontextprotocol python-sdk +1 more MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks CVE-2026-52870 Fix available 7.6 HighJuly 15, 2026
• lfprojects mcp python sdk, modelcontextprotocol python-sdk +1 more MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal CVE-2026-52869 Fix available 7.1 HighJuly 15, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Authorization Bypass in mlflow/mlflow CVE-2026-8147 Fix available 8.1 HighJuly 2, 2026
• lfprojects mlflow MLflow Experiment-scoped Label Schema CRUD API authorization CVE-2026-13484 Fix available 2.3 LowJune 28, 2026
• lfprojects mlflow MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash CVE-2026-10803 Fix available 2.0 LowJune 4, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Environment Variable Resolution Vulnerability in mlflow/mlflow CVE-2026-4035 Fix available 9.1 CriticalJune 3, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Improper Access Control in mlflow/mlflow CVE-2026-3198 Fix available 6.5 MediumJune 2, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Missing Authorization Validation in mlflow/mlflow CVE-2026-2651 Fix available 9.0 CriticalMay 25, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Authorization Bypass in SearchModelVersions in mlflow/mlflow CVE-2026-2734 Fix available 6.5 MediumMay 21, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Improper Origin Validation in mlflow/mlflow CVE-2026-2611 Fix available 9.6 CriticalMay 19, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow CVE-2026-4137 Fix available 7.0 HighMay 18, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Authentication Bypass in mlflow/mlflow CVE-2026-2652 Fix available EPSS 20.8% 8.6 HighMay 15, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more +4 more Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow CVE-2026-2614 Fix available 7.5 HighMay 11, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Server-Side Request Forgery (SSRF) in mlflow/mlflow CVE-2026-2393 Fix available 7.1 HighMay 11, 2026
• lfprojects mcp registry, modelcontextprotocol registry +1 more MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist CVE-2026-44430 Fix available 6.3 MediumMay 8, 2026
• lfprojects mcp registry, modelcontextprotocol registry +1 more MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl` CVE-2026-44429 Fix available 5.1 MediumMay 8, 2026
• lfprojects mcp registry, modelcontextprotocol registry +1 more MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience CVE-2026-44428 Fix available 2.1 LowMay 8, 2026
• lfprojects zarf Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write CVE-2026-40090 Fix available 7.1 HighApril 14, 2026
• lfprojects mcp java sdk, modelcontextprotocol java-sdk +1 more MCP Java-SDK has a DNS Rebinding Vulnerability CVE-2026-35568 Fix available 7.6 HighApril 7, 2026
• lfprojects mlflow Authorization Bypass in MLflow AJAX Endpoint CVE-2026-33866 Fix available 5.3 MediumApril 7, 2026
• lfprojects mlflow Stored XSS via unsafe YAML parsing in MLflow CVE-2026-33865 Fix available 5.1 MediumApril 7, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +1 more +3 more Missing Authentication for Critical Function in mlflow/mlflow CVE-2026-0545 9.1 CriticalApril 3, 2026
• lfprojects mcp go sdk, modelcontextprotocol go-sdk, red hat migration toolkit for virtualization +4 more +6 more Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost CVE-2026-34742 Fix available 7.6 HighApril 1, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Command Injection in mlflow/mlflow CVE-2026-0596 Public exploitFix available 9.6 CriticalMarch 31, 2026
• lfprojects mcp java sdk, modelcontextprotocol java-sdk +1 more MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) CVE-2026-34237 Fix available 6.1 MediumMarch 30, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Command Injection in mlflow/mlflow CVE-2025-15379 Fix available 10.0 CriticalMarch 30, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Path Traversal Vulnerability in mlflow/mlflow CVE-2025-15036 Fix available 9.6 CriticalMarch 30, 2026
• lfprojects mcp ruby sdk, modelcontextprotocol ruby-sdk +1 more MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay CVE-2026-33946 Fix available 8.2 HighMarch 27, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow CVE-2025-15381 Fix available 8.1 HighMarch 27, 2026
• lfprojects mcp go sdk, modelcontextprotocol go-sdk +1 more MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion CVE-2026-33252 Fix available 7.1 HighMarch 19, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Path Traversal Vulnerability in mlflow/mlflow CVE-2025-15031 Fix available 8.1 HighMarch 18, 2026
• lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more Command Injection in mlflow/mlflow CVE-2025-14287 Fix available 7.5 HighMarch 15, 2026
• lfprojects zarf Zarf: Symlink targets in archives are not validated against destination directory CVE-2026-29064 Fix available 8.2 HighMarch 6, 2026
• agentgateway Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion CVE-2026-29791 Fix available 4.9 MediumMarch 5, 2026
• lfprojects mcp go sdk, modelcontextprotocol go-sdk, red hat migration toolkit for virtualization +3 more +5 more MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity CVE-2026-27896 Fix available 7.0 HighFebruary 26, 2026
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries CVE-2026-27735 Fix available 6.4 MediumFebruary 25, 2026
• lfprojects valkey-bloom Remote DoS from malformed RESTORE command CVE-2026-21864 6.5 MediumFebruary 24, 2026
• lfprojects valkey, red hat enterprise linux 10, enterprise linux 9 +2 more Valkey has Pre-Authentication DOS from malformed RESP request CVE-2026-27623 Fix available 7.5 HighFebruary 23, 2026
• lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 more +4 more Malformed Valkey Cluster bus message can lead to Remote DoS CVE-2026-21863 Fix available 7.5 HighFebruary 23, 2026
• lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 more Valkey Affected by RESP Protocol Injection via Lua error_reply CVE-2025-67733 Public exploitFix available 8.5 HighFebruary 23, 2026
• lfprojects mcp typescript sdk, modelcontextprotocol typescript-sdk, red hat ansible automation platform 2.6 +2 more @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse CVE-2026-25536 Fix available 7.1 HighFebruary 4, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more Privilege Escalation in mlflow/mlflow CVE-2025-10279 Fix available 7.0 HighFebruary 2, 2026
• lfprojects mlflow, mlflow mlflow/mlflow +1 more DNS Rebinding Vulnerability in mlflow/mlflow CVE-2025-14279 Fix available 8.1 HighJanuary 12, 2026
• anthropic mcp typescript sdk MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS CVE-2026-0621 Fix available 8.7 HighJanuary 5, 2026
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git has missing path validation when using --repository flag CVE-2025-68145 Fix available 6.4 MediumDecember 17, 2025
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files CVE-2025-68144 Fix available 6.3 MediumDecember 17, 2025
• lfprojects model context protocol servers, modelcontextprotocol servers +1 more mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations CVE-2025-68143 Fix available 6.5 MediumDecember 17, 2025
• apptainer Apptainer ineffective application of selinux and apparmor --security options CVE-2025-65105 Fix available 4.5 MediumDecember 2, 2025
• Show olderLoading…