1
CVEs
0
Critical
0
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
0
LOW
1
Monthly CVE Trend
Affected Products (25)
Mlflow
54
AI / ML
5
Valkey
5
Model Context Protocol Servers
4
Python
4
Apptainer
3
Mcp Typescript Sdk
3
Redis
2
Ubuntu
2
Minder
2
Node.js
1
Case Python Utilities
1
Singularity
1
Cdo Local Uuid Utility
1
Mcp Python Sdk
1
Modelina
1
Debian Linux
1
Kubernetes
1
Brute Force
1
Zarf
1
Enterprise Linux
1
Mcp Go Sdk
1
Valkey Bloom
1
Ssti
1
Agentgateway
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-10803 | Dataset digest computation in MLflow up to version 3.10.0 uses MD5 - a cryptographically broken algorithm - to fingerprint datasets, enabling a local attacker to craft colliding inputs that undermine dataset integrity tracking. Affected functions include compute_pandas_digest, compute_numpy_digest, and hash_dict_of_arrays in mlflow/data/digest_utils.py, which use a truncated 8-character MD5 digest that further reduces the collision space. Publicly available exploit code exists; this vulnerability is not confirmed actively exploited per CISA KEV, and the CVSS 4.0 score of 1.1 reflects the constrained local-only attack surface. | LOW | 1.1 | 0.0% | 6 |
|