JFrog Security Research

Software Vulnerabilities

Last Updated On 14 Sep, 2026

195

Vulnerabilities
discovered

XRAY-520917
npm proxy undefined variable remote DoShighCVE-2023-2968
CVE-2023-2968
CVE-2023-2968
high
Discovered ByOri Hollander●
Published on 30 May, 2023 ●
XRAY-520621
QEMU Heap overflow VM escapemediumCVE-2023-1601
CVE-2023-1601
CVE-2023-1601
medium
Discovered ByYair Mizrahi●
Published on 23 May, 2023 ●
XRAY-427911
Jettison JSONArray DoSmediumCVE-2023-1436
CVE-2023-1436
CVE-2023-1436
medium
Discovered ByNitay Meiron●
Published on 16 Mar, 2023 ●
XRAY-427633
json-smart Stack exhaustion DoShighCVE-2023-1370
CVE-2023-1370
CVE-2023-1370
high
Discovered ByOri Hollander●
Published on 13 Mar, 2023 ●
Caret XSS RCEhighCVE-2022-42967
CVE-2022-42967
CVE-2022-42967
high
Discovered ByDenys Vozniuk●
Published on 10 Jan, 2023 ●
XRAY-259933
libtiff tiffcrop buffer overflow DoSmediumCVE-2022-34526
CVE-2022-34526
CVE-2022-34526
medium
Discovered ByNitay Meiron●
Published on 16 Nov, 2022 ●
conduit-hyper missing request size limit DoShighCVE-2022-39294
CVE-2022-39294
CVE-2022-39294
high
Discovered ByOri Hollander●
Published on 1 Nov, 2022 ●
XRAY-257185
snowflake-connector-python ReDoSlowCVE-2022-42965
CVE-2022-42965
CVE-2022-42965
low
Discovered ByDenys Vozniuk●
Published on 15 Oct, 2022 ●
XRAY-257184
pymatgen ReDoSmediumCVE-2022-42964
CVE-2022-42964
CVE-2022-42964
medium
Discovered ByDenys Vozniuk●
Published on 15 Oct, 2022 ●
XRAY-257186
cleo ReDoSmediumCVE-2022-42966
CVE-2022-42966
CVE-2022-42966
medium
Discovered ByDenys Vozniuk●
Published on 15 Oct, 2022 ●