JFrog Security Research

Software Vulnerabilities

Last Updated On 14 Sep, 2026

195

Vulnerabilities
discovered

XRAY-231662
Node.js llhttp HTTP smugglingmediumCVE-2022-32215
CVE-2022-32215
CVE-2022-32215
medium
Discovered ByZhang Zeyu, Liav Gutman●
Published on 4 Oct, 2022 ●
Rust Cargo zip-bomb DoSlowCVE-2022-36114
CVE-2022-36114
CVE-2022-36114
low
Discovered ByOri Hollander●
Published on 14 Sep, 2022 ●
Rust Cargo symlink arbitrary file overwritelowCVE-2022-36113
CVE-2022-36113
CVE-2022-36113
low
Discovered ByOri Hollander●
Published on 14 Sep, 2022 ●
axum-core missing request size limit DoShighCVE-2022-3212
CVE-2022-3212
CVE-2022-3212
high
Discovered ByOri Hollander●
Published on 31 Aug, 2022 ●
Javassist local code executionlow

low
Discovered ByOmer Kaspi●
Published on 11 Aug, 2022 ●
XRAY-248681
eth-account ReDoSmediumCVE-2022-1930
CVE-2022-1930
CVE-2022-1930
medium
Discovered ByDenys Vozniuk●
Published on 11 Aug, 2022 ●
XRAY-211351
uri-template-lite URI.expand ReDoSmediumCVE-2021-43309
CVE-2021-43309
CVE-2021-43309
medium
Discovered ByDenys Vozniuk●
Published on 3 Aug, 2022 ●
XRAY-229139
UA .NET Standard stack exhaustion DoShighCVE-2022-29866
CVE-2022-29866
CVE-2022-29866
high
Discovered ByUriya Yavniely●
Published on 16 Jun, 2022 ●
XRAY-229142
UA .NET Standard memory exhaustion DoShighCVE-2022-29863
CVE-2022-29863
CVE-2022-29863
high
Discovered ByUriya Yavniely●
Published on 16 Jun, 2022 ●
XRAY-227941
Envoy proxy decompressor memory exhaustion DoShighCVE-2022-29225
CVE-2022-29225
CVE-2022-29225
high
Discovered ByOri Hollander●
Published on 9 Jun, 2022 ●