20
CVEs
1
Critical
11
High
0
KEV
5
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.7%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
11
MEDIUM
7
LOW
1
Monthly CVE Trend
Affected Products (25)
Mlflow
54
AI / ML
5
Valkey
5
Model Context Protocol Servers
4
Python
4
Apptainer
3
Mcp Typescript Sdk
3
Redis
2
Ubuntu
2
Minder
2
Node.js
1
Case Python Utilities
1
Singularity
1
Cdo Local Uuid Utility
1
Mcp Python Sdk
1
Modelina
1
Debian Linux
1
Kubernetes
1
Brute Force
1
Zarf
1
Enterprise Linux
1
Mcp Go Sdk
1
Valkey Bloom
1
Ssti
1
Agentgateway
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-49844 | UAF in Redis 8.2.1 via crafted Lua scripts by authenticated users. EPSS 12.4%. Patch available. | CRITICAL | 9.9 | 12.4% | 92 |
PoC
|
| CVE-2026-0621 | Denial of service in Anthropic's Model Context Protocol (MCP) TypeScript SDK versions up to and including 1.25.1 allows remote attackers to hang the Node.js event loop by submitting a crafted URI to the UriTemplate matcher. The dynamically built regex for RFC 6570 exploded array patterns contains nested quantifiers that trigger catastrophic backtracking, pinning CPU and rendering the process unresponsive. Publicly available exploit code exists, though EPSS is very low (0.02%) and it is not listed in CISA KEV, so real-world exploitation currently appears theoretical rather than widespread. | HIGH | 8.7 | 0.0% | 64 |
PoC
|
| CVE-2026-29064 | Zarf is an Airgap Native Packager Manager for Kubernetes. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.0% | 61 |
PoC
|
| CVE-2025-66414 | A security vulnerability in MCP TypeScript SDK (CVSS 8.1) that allows dns rebinding protection. High severity vulnerability requiring prompt remediation. Vendor patch is available. | HIGH | 8.1 | 0.0% | 41 |
|
| CVE-2025-66416 | CVE-2025-66416 is a security vulnerability (CVSS 8.1) that allows dns rebinding protection. High severity vulnerability requiring prompt remediation. Vendor patch is available. | HIGH | 8.1 | 0.0% | 41 |
PoC
|
| CVE-2025-14279 | MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header validation in the MLFlow REST server. This vulnerability allows malicious websites to bypass Same-Origin Policy protections and execute unauthorized calls against REST endpoints. [CVSS 8.1 HIGH] | HIGH | 8.1 | 0.0% | 41 |
|
| CVE-2026-27623 | Denial of service in Valkey 9.0.0 through 9.0.2 allows unauthenticated network attackers to crash the server by exploiting improper networking state handling after empty requests. An attacker can trigger an assertion failure that causes the Valkey process to abort, impacting availability for all users. No patch is currently available; network isolation is recommended as a mitigation. | HIGH | 7.5 | 0.1% | 38 |
|
| CVE-2026-21863 | Out-of-bounds read in Valkey clusterbus port processing allows network-adjacent attackers to crash affected systems by sending specially crafted packets that bypass buffer validation checks. This vulnerability affects Valkey versions prior to 9.0.2, 8.1.6, 8.0.7, and 7.2.12, impacting any deployment exposing the clusterbus port to untrusted networks. Patches are available and administrators should restrict clusterbus access with network ACLs as an immediate mitigation. | HIGH | 7.5 | 0.0% | 38 |
|
| CVE-2025-67733 | Response-stream injection in Valkey (the Redis fork) lets an authenticated user abuse Lua scripting commands to smuggle arbitrary bytes into the reply stream, corrupting or tampering with data returned to other users sharing the same connection. The flaw stems from the Lua script error-handling path mishandling null characters. It affects all releases prior to 9.0.2, 8.1.6, 8.0.7, and 7.2.12. No public exploit identified at time of analysis; EPSS exploitation probability is negligible (0.02%, 4th percentile) and the issue is not in CISA KEV. | HIGH | 7.1 | 0.0% | 36 |
|
| CVE-2026-25536 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. [CVSS 7.1 HIGH] | HIGH | 7.1 | 0.0% | 36 |
PoC
|
| CVE-2026-27896 | s standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions up to 1.3.1. contains a security vulnerability. | HIGH | 7.0 | 0.1% | 35 |
|
| CVE-2025-10279 | In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). [CVSS 7.0 HIGH] | HIGH | 7.0 | 0.0% | 35 |
|
| CVE-2026-21864 | Denial of service in Valkey-Bloom module allows authenticated attackers to crash the Valkey server by sending a specially crafted RESTORE command that triggers an unhandled assertion. The vulnerability exists because the module failed to set the IO_ERRORS flag during RDB parsing, causing the server to shut down instead of gracefully handling the malformed input. A security patch is available, and administrators can mitigate the issue by disabling the RESTORE command if not required. | MEDIUM | 6.5 | 0.1% | 33 |
|
| CVE-2025-68143 | Unvalidated path handling in mcp-server-git versions before 2025.9.25 allows remote attackers to create Git repositories in arbitrary filesystem locations accessible to the server process via the git_init tool, potentially enabling subsequent malicious git operations on unintended directories. The git_init tool was completely removed in the patched version since the server is designed to operate only on existing repositories. No active exploitation has been confirmed, but the vulnerability carries a moderate CVSS score of 6.5 with network accessibility and high scope impact. | MEDIUM | 6.5 | 0.2% | 32 |
|
| CVE-2026-27735 | Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. | MEDIUM | 6.4 | 0.1% | 32 |
|