Browse CVEs

HIGH 8.1 CVE-2026-59950 The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.we… Mcp Python Sdk 1.28.1+ Fix from $1,9502026-07-15 HIGH 7.6 CVE-2026-52870 The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers in… Mcp Python Sdk 1.27.2+ Fix from $1,9502026-07-15 HIGH 7.1 CVE-2026-52869 The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streama… Mcp Python Sdk 1.27.2+ Fix from $1,9502026-07-15 HIGH 8.1 CVE-2026-8147 In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allo… Mlflow 3.14.0+ Fix from $1,9502026-07-02 HIGH 8.8 CVE-2026-13484 A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component… Mlflow after 2026-05-26 Fix from $1,9502026-06-28 HIGH 7.7 CVE-2026-4035 A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be expl… Mlflow 3.11.0+ Fix from $1,9502026-06-03 MEDIUM 6.5 CVE-2026-3198 MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically,… Mlflow No fix yet Fix from $1,6002026-06-02 CRITICAL 9.0 CVE-2026-2651 A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is … Mlflow after 3.10.1 Fix from $2,3002026-05-25 MEDIUM 6.5 CVE-2026-2734 In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-… Mlflow 3.10.0+ Fix from $1,6002026-05-21 CRITICAL 9.6 CVE-2026-2611 In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a r… Mlflow 3.10.0+ Fix from $2,3002026-05-19 HIGH 7.8 CVE-2026-4137 In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories w… Mlflow 3.11.0+ Fix from $1,9502026-05-18 HIGH 8.6 CVE-2026-2652EPSS 19% A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with a… Mlflow 3.10.0+ Fix from $1,9502026-05-15 MEDIUM 5.4 CVE-2026-44429 The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the public catalogue UI served a… Mcp Registry 1.7.7+ Fix from $1,6002026-05-14 HIGH 7.5 CVE-2026-2614 A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthe… Mlflow 3.10.0+ Fix from $1,9502026-05-11 HIGH 7.1 CVE-2026-2393 A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handl… Mlflow 3.9.0+ Fix from $1,9502026-05-11 HIGH 7.1 CVE-2026-40090 Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf pa… Zarf 0.74.2+ Fix from $1,9502026-04-15 MEDIUM 5.7 CVE-2026-35568 MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerabi… Mcp Java Sdk 1.0.0+ Fix from $1,6002026-04-07 MEDIUM 5.4 CVE-2026-33865 MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface. An authentic… Mlflow after 3.10.1 Fix from $1,6002026-04-07 CRITICAL 9.8 CVE-2026-0545 In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` a… Mlflow Mitigation only Fix from $2,3002026-04-03 HIGH 8.1 CVE-2026-34742 The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.0, the Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protec… Mcp Go Sdk 1.4.0+ Fix from $1,9502026-04-02 MEDIUM 6.1 CVE-2026-34237 MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcode… Mcp Java Sdk 1.0.1+ Fix from $1,6002026-03-31 HIGH 7.8 CVE-2026-0596 A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into… Mlflow No fix yet Fix from $1,9502026-03-31 CRITICAL 9.8 CVE-2025-15379 A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to… Mlflow after 3.8.1 Fix from $2,3002026-03-30 CRITICAL 10.0 CVE-2025-15036 A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlf… Mlflow 3.9.0+ Fix from $2,3002026-03-30 MEDIUM 5.9 CVE-2026-33946 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to version 0.9.2, the Ruby SDK's streamable_http_transpor… Mcp Ruby Sdk 0.9.2+ Fix from $1,6002026-03-27 HIGH 7.1 CVE-2025-15381 In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission valida… Mlflow No fix yet Fix from $1,9502026-03-27 MEDIUM 6.5 CVE-2026-33252 The Go MCP SDK used Go's standard encoding/json. Prior to version 1.4.1, the Go SDK's Streamable HTTP transport accepted browser-generated cross-site… Mcp Go Sdk 1.4.1+ Fix from $1,6002026-03-24 CRITICAL 9.1 CVE-2025-15031 A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically,… Mlflow after 3.10.1 Fix from $2,3002026-03-18 HIGH 8.8 CVE-2025-14287 A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 16… Mlflow 3.7.0+ Fix from $1,9502026-03-16 MEDIUM 6.5 CVE-2026-29791 Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, w… Agentgateway 0.12.0+ Fix from $1,6002026-03-06