{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.12.0rc3"}],"component":"mlrun","cve_ids":["CVE-2026-10766"],"ecosystem":"PyPI","epss":0.00075,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-phx2-3w66-h4pw","id":"tcs_01M5KFT71ZK69SKZP6WD41FZ6V","modified_at":"2026-07-23T15:11:18.842288169Z","published_at":"2026-06-03T21:30:31Z","references":["https://osv.dev/vulnerability/GHSA-phx2-3w66-h4pw","https://nvd.nist.gov/vuln/detail/CVE-2026-10766","https://github.com/mlrun/mlrun/issues/9691","https://github.com/mlrun/mlrun/pull/9692","https://github.com/mlrun/mlrun","https://vuldb.com/cve/CVE-2026-10766","https://vuldb.com/submit/831419","https://vuldb.com/vuln/368136","https://vuldb.com/vuln/368136/cti"],"severity":{"label":"low","score":3.6},"sources":[{"source":"osv","source_id":"GHSA-phx2-3w66-h4pw","url":"https://osv.dev/vulnerability/GHSA-phx2-3w66-h4pw"}],"summary":"mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption"}