JFrog Security Research

Software Vulnerabilities

Last Updated On 1 Nov, 2026

201

Vulnerabilities
discovered

PeerTube User Import Authenticated Resource ExhaustionmediumCVE-2025-32949
CVE-2025-32949
CVE-2025-32949
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube User Import Authenticated Persistent Denial of ServicemediumCVE-2025-32944
CVE-2025-32944
CVE-2025-32944
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube Arbitrary Playlist Creation via REST APImediumCVE-2025-32945
CVE-2025-32945
CVE-2025-32945
medium
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube ActivityPub Playlist Creation Blind SSRF and DoShighCVE-2025-32948
CVE-2025-32948
CVE-2025-32948
high
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
PeerTube ActivityPub Crawl Infinite Loop DoShighCVE-2025-32947
CVE-2025-32947
CVE-2025-32947
high
Discovered ByOri Hollander●
Published on 14 Apr, 2025 ●
mholt/archiver Zip Slip Path TraversalhighCVE-2025-3445
CVE-2025-3445
CVE-2025-3445
high
Discovered ByOfri Ouzan●
Published on 14 Apr, 2025 ●
LemmyNet activitypub_federation WebFinger Blind SSRFmediumCVE-2025-25194
CVE-2025-25194
CVE-2025-25194
medium
Discovered ByNatan Nehorai●
Published on 10 Feb, 2025 ●
Fedify WebFinger Infinite Loop and Blind SSRFmediumCVE-2025-23221
CVE-2025-23221
CVE-2025-23221
medium
Discovered ByNatan Nehorai●
Published on 20 Jan, 2025 ●
JFSA-2024-001063927
Wget shorthand URLs SSRFmediumCVE-2024-10524
CVE-2024-10524
CVE-2024-10524
medium
Discovered ByGoni Golan●
Published on 19 Nov, 2024 ●
JFSA-2024-001039603
Mage AI file content request remote arbitrary file leakmediumCVE-2024-45188
CVE-2024-45188
CVE-2024-45188
medium
Discovered ByOri Hollander●
Published on 23 Aug, 2024 ●