JFrog Security Research

Software Vulnerabilities

Last Updated On 15 Sep, 2025

167

Vulnerabilities
discovered

Vite arbitrary remote HTML file leakhighCVE-2025-58752
CVE-2025-58752
CVE-2025-58752
high
Discovered ByOri Hollander●
Published on 15 Sep, 2025 ●
Vite arbitrary restricted remote file leakhighCVE-2025-58751
CVE-2025-58751
CVE-2025-58751
high
Discovered ByOri Hollander●
Published on 15 Sep, 2025 ●
JFSA-2025-001449533
Chaos Mesh debugging server DoShighCVE-2025-59358
CVE-2025-59358
CVE-2025-59358
high
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449535
Chaos Mesh killProcesses command injectioncriticalCVE-2025-59360
CVE-2025-59360
CVE-2025-59360
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449536
Chaos Mesh cleanIptables command injectioncriticalCVE-2025-59361
CVE-2025-59361
CVE-2025-59361
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449534
Chaos Mesh cleanTcs command injectioncriticalCVE-2025-59359
CVE-2025-59359
CVE-2025-59359
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001434277
Smolagents Local Python Sandbox EscapehighCVE-2025-9959
CVE-2025-9959
CVE-2025-9959
high
Discovered ByNatan Nehorai●
Published on 3 Sep, 2025 ●
JFSA-2025-001379925
Flowise JS injection remote code executioncriticalCVE-2025-55346
CVE-2025-55346
CVE-2025-55346
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001380578
Flowise OS command remote code executioncriticalCVE-2025-8943
CVE-2025-8943
CVE-2025-8943
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001378631
Codex CLI Symlink Arbitrary File OverwritehighCVE-2025-55345
CVE-2025-55345
CVE-2025-55345
high
Discovered ByAssaf Levkovich●
Published on 13 Aug, 2025 ●