{"api_version":"v1","generated_at":"2026-10-09T13:20:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-publisher-not-identified-mlflow-0e6c8793d0da","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mlflow","name":"MLflow","next_cursor":null,"observations":[{"affected":"4666cffc7912ea606d592fc38d6a75e2935f65e7","affected_versions_present":true,"cve_id":"CVE-2026-13484","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13484","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T18:36:34.803Z","patch_url":"","primary_source":"","published":"2026-06-28T08:30:09.086Z"},{"affected":"3.0; 3.1; 3.2; 3.3; 3.4; 3.5; 3.6; 3.7","affected_versions_present":true,"cve_id":"CVE-2026-10803","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-10803","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-04T12:55:59.415Z","patch_url":"https://github.com/mlflow/mlflow/issues/22419","primary_source":"","published":"2026-06-04T11:45:10.363Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Publisher not identified"}}