JFrog Security Research

Software Vulnerabilities

Last Updated On 14 Aug, 2025

160

Vulnerabilities
discovered

JFSA-2025-001380578
Flowise OS command remote code executioncriticalCVE-2025-8943
CVE-2025-8943
CVE-2025-8943
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001379925
Flowise JS injection remote code executioncriticalCVE-2025-55346
CVE-2025-55346
CVE-2025-55346
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001378631
Codex CLI Symlink Arbitrary File OverwritehighCVE-2025-55345
CVE-2025-55345
CVE-2025-55345
high
Discovered ByAssaf Levkovich●
Published on 13 Aug, 2025 ●
Keras untrusted model arbitrary file writehighCVE-2025-8747
CVE-2025-8747
CVE-2025-8747
high
Discovered ByAndrey Polkovnichenko●
Published on 12 Aug, 2025 ●
Webfinger.js Blind SSRFmediumCVE-2025-54590
CVE-2025-54590
CVE-2025-54590
medium
Discovered ByOri Hollander●
Published on 28 Jul, 2025 ●
JFSA-2025-001290844
OS command injection in mcp-remote when connecting to untrusted MCP serverscriticalCVE-2025-6514
CVE-2025-6514
CVE-2025-6514
critical
Discovered ByOr Peles●
Published on 9 Jul, 2025 ●
Tensorflow Serving Stack Exhaustion DoShighCVE-2025-0649
CVE-2025-0649
CVE-2025-0649
high
Discovered ByOri Hollander●
Published on 6 May, 2025 ●
PeerTube HLS Video Files Path TraversallowCVE-2025-32943
CVE-2025-32943
CVE-2025-32943
low
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube User Import Authenticated Resource ExhaustionmediumCVE-2025-32949
CVE-2025-32949
CVE-2025-32949
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube User Import Authenticated Persistent Denial of ServicemediumCVE-2025-32944
CVE-2025-32944
CVE-2025-32944
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●