JFrog Security Research

Software Vulnerabilities

Last Updated On 18 Jan, 2026

180

Vulnerabilities
discovered

JFSA-2026-001651077
n8n Python runner sandbox escapehighCVE-2026-0863
CVE-2026-0863
CVE-2026-0863
high
Discovered ByNatan Nehorai●
Published on 18 Jan, 2026 ●
Node.js filesystem permissions bypasshighCVE-2025-55130
CVE-2025-55130
CVE-2025-55130
high
Discovered ByNatan Nehorai●
Published on 13 Jan, 2026 ●
JFSA-2025-001648329
python-utcp untrusted Manual command executionhighCVE-2025-14542
CVE-2025-14542
CVE-2025-14542
high
Discovered ByOr Peles●
Published on 11 Dec, 2025 ●
JFSA-2025-001648159
Litmus Chaos JWT Missing Entropy Privilege EscalationhighCVE-2025-14261
CVE-2025-14261
CVE-2025-14261
high
Discovered ByNatan Nehorai●
Published on 8 Dec, 2025 ●
n8n Git Node RCEhighCVE-2025-62726
CVE-2025-62726
CVE-2025-62726
high
Discovered ByAssaf Levkovich●
Published on 4 Nov, 2025 ●
JFSA-2025-001495652
DSPy sandbox escape arbitrary file readmediumCVE-2025-12695
CVE-2025-12695
CVE-2025-12695
medium
Discovered ByNatan Nehorai●
Published on 4 Nov, 2025 ●
Cursor CLI Untrusted Project RCEhighCVE-2025-61592
CVE-2025-61592
CVE-2025-61592
high
Discovered ByAssaf Levkovich●
Published on 4 Nov, 2025 ●
JFSA-2025-001495618
React Native CLI Command InjectioncriticalCVE-2025-11953
CVE-2025-11953
CVE-2025-11953
critical
Discovered ByOr Peles●
Published on 3 Nov, 2025 ●
JFSA-2025-001494691
oatpp-mcp prompt hijackingmediumCVE-2025-6515
CVE-2025-6515
CVE-2025-6515
medium
Discovered ByOri Hollander●
Published on 20 Oct, 2025 ●
JFSA-2025-001471363
txtai arbitrary file writehighCVE-2025-10854
CVE-2025-10854
CVE-2025-10854
high
Discovered ByOri Hollander●
Published on 22 Sep, 2025 ●