JFrog Security Research

Software Vulnerabilities

Last Updated On 7 Oct, 2026

197

Vulnerabilities
discovered

Keras untrusted model arbitrary file writehighCVE-2025-8747
CVE-2025-8747
CVE-2025-8747
high
Discovered ByAndrey Polkovnichenko●
Published on 12 Aug, 2025 ●
Webfinger.js Blind SSRFmediumCVE-2025-54590
CVE-2025-54590
CVE-2025-54590
medium
Discovered ByOri Hollander●
Published on 28 Jul, 2025 ●
JFSA-2025-001290844
OS command injection in mcp-remote when connecting to untrusted MCP serverscriticalCVE-2025-6514
CVE-2025-6514
CVE-2025-6514
critical
Discovered ByOr Peles●
Published on 9 Jul, 2025 ●
Tensorflow Serving Stack Exhaustion DoShighCVE-2025-0649
CVE-2025-0649
CVE-2025-0649
high
Discovered ByOri Hollander●
Published on 6 May, 2025 ●
PeerTube HLS Video Files Path TraversallowCVE-2025-32943
CVE-2025-32943
CVE-2025-32943
low
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube User Import Authenticated Resource ExhaustionmediumCVE-2025-32949
CVE-2025-32949
CVE-2025-32949
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube ActivityPub Crawl Infinite Loop DoShighCVE-2025-32947
CVE-2025-32947
CVE-2025-32947
high
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube User Import Authenticated Persistent Denial of ServicemediumCVE-2025-32944
CVE-2025-32944
CVE-2025-32944
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube ActivityPub Playlist Creation Blind SSRF and DoShighCVE-2025-32948
CVE-2025-32948
CVE-2025-32948
high
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube Arbitrary Playlist Creation via REST APImediumCVE-2025-32945
CVE-2025-32945
CVE-2025-32945
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●