JFrog Security Research

Software Vulnerabilities

Last Updated On 14 Sep, 2026

195

Vulnerabilities
discovered

JFSA-2024-001035519
Guardrails RAIL XXEmediumCVE-2024-6961
CVE-2024-6961
CVE-2024-6961
medium
Discovered ByNatan Nehorai●
Published on 21 Jul, 2024 ●
JFSA-2024-001035320
Deep Lake Kaggle dataset command injectionhighCVE-2024-6507
CVE-2024-6507
CVE-2024-6507
high
Discovered ByNatan Nehorai●
Published on 4 Jul, 2024 ●
JFSA-2024-001034449
Vanna prompt injection RCEhighCVE-2024-5565
CVE-2024-5565
CVE-2024-5565
high
Discovered ByNatan Nehorai●
Published on 31 May, 2024 ●
JFSA-2024-001034098
libxmljs2 namespaces type confusion RCEhighCVE-2024-34394
CVE-2024-34394
CVE-2024-34394
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001034097
libxmljs2 attrs type confusion RCEhighCVE-2024-34393
CVE-2024-34393
CVE-2024-34393
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001034096
libxmljs namespaces type confusion RCEhighCVE-2024-34392
CVE-2024-34392
CVE-2024-34392
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001033988
libxmljs attrs type confusion RCEhighCVE-2024-34391
CVE-2024-34391
CVE-2024-34391
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001031292
sqlparse stack exhaustion DoShighCVE-2024-4340
CVE-2024-4340
CVE-2024-4340
high
Discovered ByUriya Yavnieli●
Published on 30 Apr, 2024 ●
JFSA-2024-001028816
lollms-webui exposed endpoints DoShighCVE-2024-1873
CVE-2024-1873
CVE-2024-1873
high
Discovered ByNaveh Racovsky●
Published on 16 Apr, 2024 ●
JFSA-2024-001028813
lollms-webui SQLi DoShighCVE-2024-1601
CVE-2024-1601
CVE-2024-1601
high
Discovered ByNaveh Racovsky●
Published on 15 Apr, 2024 ●