Skip to contentLfprojects vulnerabilities
Newest
- lfprojects mcp python sdk, modelcontextprotocol python-sdk +1 moreDNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on LocalhostCVE-2025-66416Fix available7.6 High
- lfprojects mcp typescript sdk, modelcontextprotocol typescript-sdk +1 moreDNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on LocalhostCVE-2025-66414Fix available7.6 High
- lfprojects mlflowMLflow Weak Password Requirements Authentication Bypass VulnerabilityCVE-2025-11200Fix available8.1 High
- lfprojects mlflowMLflow Tracking Server Model Creation Directory Traversal Remote Code Execution VulnerabilityCVE-2025-11201Public exploitFix availableEPSS 60.3%8.1 High
- redis, lfprojects valkey +1 moreRedis Lua Use-After-Free may lead to remote code executionCVE-2025-49844Public exploitFix availableEPSS 83.2%10.0 Critical
- lfprojects mlflowMLFlow SSRF via gateway_proxy_handlerCVE-2025-52967Fix available5.8 Medium
- redis, debian linux, lfprojects valkey +2 moreRedis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientCVE-2025-21605Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreDenial of Service through Batched Queries in GraphQL in mlflow/mlflowCVE-2025-0453Fix availableEPSS 11.3%5.9 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreWeak Password Requirements in mlflow/mlflowCVE-2025-1474Fix available3.8 Low
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreCSRF in mlflow/mlflowCVE-2025-1473Fix available5.4 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal in mlflow/mlflowCVE-2024-8859Public exploitFix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreUncontrolled Resource Consumption in mlflow/mlflowCVE-2024-6838Fix available5.3 Medium
- lfprojects mlflowExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udfCVE-2024-27134Fix available7.0 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflowCVE-2024-2928Public exploitFix availableEPSS 21.8%7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreRemote Code Execution due to Full Controlled File Write in mlflow/mlflowCVE-2024-0520Public exploitFix available10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreDenial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflowCVE-2024-3099Fix available5.4 Medium
- lfprojects mlflowMLFlow improper input validationCVE-2024-37061Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37060Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37059Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37058Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-370578.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37056Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37055Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37054Public exploitFix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37053Fix available8.8 High
- lfprojects mlflowMLFlow unsafe deserializationCVE-2024-37052Fix available8.8 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Access Control in mlflow/mlflowCVE-2024-4263Fix available5.4 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Bypass in mlflow/mlflowCVE-2024-3848Fix availableEPSS 43.0%7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Inclusion (LFI) via Scheme Confusion in mlflow/mlflowCVE-2024-3573Fix available9.3 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Read via Path Traversal in mlflow/mlflowCVE-2024-1594Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal via Parameter Smuggling in mlflow/mlflowCVE-2024-1593Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1558Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow, mflow +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1483Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1560Fix available8.1 High
- lfprojects minder`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated userCVE-2024-27916Fix available7.1 High
- lfprojects minderMinder trusts client-provided mapping from repo name to upstream IDCVE-2024-27093Fix available4.6 Medium
- lfprojects mlflowInsufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.CVE-2024-27133Fix available7.5 High
- lfprojects mlflowInsufficient sanitization in MLflow leads to XSS when running an untrusted recipe.CVE-2024-27132Fix available7.5 High
- cyber-domain-ontology cdo-utility-local-uuid, lfprojects case python utilities, cdo local uuid utility +2 morecdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration codeCVE-2024-22194Fix available2.2 Low
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'CVE-2023-6977Fix available10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreUnrestricted Upload of File with Dangerous TypeCVE-2023-6976Fix available8.8 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'CVE-2023-6975Fix available9.8 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreServer-Side Request Forgery (SSRF)CVE-2023-6974Fix available8.6 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreCommand InjectionCVE-2023-6940Fix available9.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-6909Fix availableEPSS 89.7%7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-6831Fix available8.1 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal in mlflow/mlflowCVE-2023-6753Fix available9.6 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflowCVE-2023-6709Fix available10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreReflected XSS via Content-Type Header in mlflow/mlflowCVE-2023-6568Fix available6.5 Medium
- lfprojects mlflowInformation exposure in MLflowCVE-2023-43472Fix availableEPSS 36.6%7.5 High
- Show moreLoading…