JFrog Security Research

Software Vulnerabilities

Last Updated On 1 Nov, 2026

201

Vulnerabilities
discovered

JFSA-2025-001471363
txtai arbitrary file writehighCVE-2025-10854
CVE-2025-10854
CVE-2025-10854
high
Discovered ByOri Hollander●
Published on 22 Sep, 2025 ●
XRAY-720930
PickleScan Unsafe Globals Check Bypass via Submodule ImportscriticalCVE-2025-10157
CVE-2025-10157
CVE-2025-10157
critical
Discovered ByDavid Cohen●
Published on 21 Sep, 2025 ●
XRAY-720938
PickleScan Bypass via ZIP file bad CRCcriticalCVE-2025-10156
CVE-2025-10156
CVE-2025-10156
critical
Discovered ByDavid Cohen●
Published on 21 Sep, 2025 ●
XRAY-720936
PickleScan Bypass via File Extension MismatchcriticalCVE-2025-10155
CVE-2025-10155
CVE-2025-10155
critical
Discovered ByDavid Cohen●
Published on 21 Sep, 2025 ●
Vite arbitrary restricted remote file leakhighCVE-2025-58751
CVE-2025-58751
CVE-2025-58751
high
Discovered ByOri Hollander●
Published on 15 Sep, 2025 ●
Vite arbitrary remote HTML file leakhighCVE-2025-58752
CVE-2025-58752
CVE-2025-58752
high
Discovered ByOri Hollander●
Published on 15 Sep, 2025 ●
JFSA-2025-001449533
Chaos Mesh debugging server DoShighCVE-2025-59358
CVE-2025-59358
CVE-2025-59358
high
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449535
Chaos Mesh killProcesses command injectioncriticalCVE-2025-59360
CVE-2025-59360
CVE-2025-59360
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449536
Chaos Mesh cleanIptables command injectioncriticalCVE-2025-59361
CVE-2025-59361
CVE-2025-59361
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●
JFSA-2025-001449534
Chaos Mesh cleanTcs command injectioncriticalCVE-2025-59359
CVE-2025-59359
CVE-2025-59359
critical
Discovered ByNatan Nehorai●
Published on 15 Sep, 2025 ●