< Back
Software Vulnerabilities
Last Updated On 7 Oct, 2026
- JFSA-2026-001676778NoteGen is vulnerable to Arbitrary OS Command Execution via Tauri shell:allow-execute for bash/pythonCVE-2026-17497highDiscovered ByYuval MoravchickPublished on 26 Jul, 2026
- JFSA-2026-001676838FFmpeg is vulnerable to a Heap Out-of-Bounds Write in the MagicYUV Decoder (PixelSmash)CVE-2026-8461highDiscovered ByOri HollanderPublished on 18 Jun, 2026
- JFSA-2026-001676839The Reachy Mini daemon is vulnerable to an Unrestricted File Upload in the Media Sounds Upload APICVE-2026-55419mediumDiscovered ByNatan NehoraiPublished on 15 Jun, 2026
- JFSA-2026-001667223The Reachy Mini Wireless image is vulnerable to a Local Privilege Escalation via an Unrestricted sudo systemctl GrantCVE-2026-53605highDiscovered ByYuval MoravchickPublished on 15 Jun, 2026
- JFSA-2026-001653029mcp-run-python Deno SSRFCVE-2026-25904mediumDiscovered ByNatan NehoraiPublished on 9 Feb, 2026
- JFSA-2026-001653030mcp-run-python lack of isolation MCP takeoverCVE-2026-25905mediumDiscovered ByNatan NehoraiPublished on 9 Feb, 2026
- JFSA-2026-001651697n8n Expression Node RCECVE-2026-1470criticalDiscovered ByNatan NehoraiPublished on 27 Jan, 2026
- JFSA-2026-001651077n8n Python runner sandbox escapeCVE-2026-0863highDiscovered ByNatan NehoraiPublished on 18 Jan, 2026
- Node.js filesystem permissions bypassCVE-2025-55130highDiscovered ByNatan NehoraiPublished on 13 Jan, 2026
- JFSA-2025-001648329python-utcp untrusted Manual command executionCVE-2025-14542highDiscovered ByOr PelesPublished on 11 Dec, 2025