JFrog Security Research

Software Vulnerabilities

Last Updated On 1 Nov, 2026

201

Vulnerabilities
discovered

JFSA-2025-001434277
Smolagents Local Python Sandbox EscapehighCVE-2025-9959
CVE-2025-9959
CVE-2025-9959
high
Discovered ByNatan Nehorai●
Published on 3 Sep, 2025 ●
JFSA-2025-001380578
Flowise OS command remote code executioncriticalCVE-2025-8943
CVE-2025-8943
CVE-2025-8943
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001379925
Flowise JS injection remote code executioncriticalCVE-2025-55346
CVE-2025-55346
CVE-2025-55346
critical
Discovered ByAssaf Levkovich●
Published on 14 Aug, 2025 ●
JFSA-2025-001378631
Codex CLI Symlink Arbitrary File OverwritehighCVE-2025-55345
CVE-2025-55345
CVE-2025-55345
high
Discovered ByAssaf Levkovich●
Published on 13 Aug, 2025 ●
Keras untrusted model arbitrary file writehighCVE-2025-8747
CVE-2025-8747
CVE-2025-8747
high
Discovered ByAndrey Polkovnichenko●
Published on 12 Aug, 2025 ●
Webfinger.js Blind SSRFmediumCVE-2025-54590
CVE-2025-54590
CVE-2025-54590
medium
Discovered ByOri Hollander●
Published on 28 Jul, 2025 ●
JFSA-2025-001290844
OS command injection in mcp-remote when connecting to untrusted MCP serverscriticalCVE-2025-6514
CVE-2025-6514
CVE-2025-6514
critical
Discovered ByOr Peles●
Published on 9 Jul, 2025 ●
Tensorflow Serving Stack Exhaustion DoShighCVE-2025-0649
CVE-2025-0649
CVE-2025-0649
high
Discovered ByOri Hollander●
Published on 6 May, 2025 ●
PeerTube HLS Video Files Path TraversallowCVE-2025-32943
CVE-2025-32943
CVE-2025-32943
low
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube Arbitrary Playlist Creation via ActivityPub ProtocolmediumCVE-2025-32946
CVE-2025-32946
CVE-2025-32946
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●