JFrog Security Research

Software Vulnerabilities

Last Updated On 14 Sep, 2026

195

Vulnerabilities
discovered

JFSA-2025-001449533
Chaos Mesh debugging server DoShighCVE-2025-59358
CVE-2025-59358
CVE-2025-59358
high
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449535
Chaos Mesh killProcesses command injectioncriticalCVE-2025-59360
CVE-2025-59360
CVE-2025-59360
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449536
Chaos Mesh cleanIptables command injectioncriticalCVE-2025-59361
CVE-2025-59361
CVE-2025-59361
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449534
Chaos Mesh cleanTcs command injectioncriticalCVE-2025-59359
CVE-2025-59359
CVE-2025-59359
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001434277
Smolagents Local Python Sandbox EscapehighCVE-2025-9959
CVE-2025-9959
CVE-2025-9959
high
Discovered ByNatan Nehorai●
Published on 3 Sep, 2025 ●
JFSA-2025-001379925
Flowise JS injection remote code executioncriticalCVE-2025-55346
CVE-2025-55346
CVE-2025-55346
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001380578
Flowise OS command remote code executioncriticalCVE-2025-8943
CVE-2025-8943
CVE-2025-8943
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001378631
Codex CLI Symlink Arbitrary File OverwritehighCVE-2025-55345
CVE-2025-55345
CVE-2025-55345
high
Discovered ByAssaf Levkovich●
Published on 13 Aug, 2025 ●
Keras untrusted model arbitrary file writehighCVE-2025-8747
CVE-2025-8747
CVE-2025-8747
high
Discovered ByAndrey Polkovnichenko●
Published on 12 Aug, 2025 ●
Webfinger.js Blind SSRFmediumCVE-2025-54590
CVE-2025-54590
CVE-2025-54590
medium
Discovered ByOri Hollander●
Published on 28 Jul, 2025 ●