JFrog Security Research

Software Vulnerabilities

Last Updated On 7 Oct, 2026

197

Vulnerabilities
discovered

JFSA-2024-001039248
W&B Weave server remote arbitrary file leakhighCVE-2024-7340
CVE-2024-7340
CVE-2024-7340
high
Discovered ByNatan Nehorai and Uriya Yavnieli●
Published on 31 Jul, 2024 ●
JFSA-2024-001035518
H2O Model Deserialization RCEhighCVE-2024-6960
CVE-2024-6960
CVE-2024-6960
high
Discovered ByOri Hollander●
Published on 21 Jul, 2024 ●
JFSA-2024-001035519
Guardrails RAIL XXEmediumCVE-2024-6961
CVE-2024-6961
CVE-2024-6961
medium
Discovered ByNatan Nehorai●
Published on 21 Jul, 2024 ●
JFSA-2024-001035320
Deep Lake Kaggle dataset command injectionhighCVE-2024-6507
CVE-2024-6507
CVE-2024-6507
high
Discovered ByNatan Nehorai●
Published on 4 Jul, 2024 ●
JFSA-2024-001034449
Vanna prompt injection RCEhighCVE-2024-5565
CVE-2024-5565
CVE-2024-5565
high
Discovered ByNatan Nehorai●
Published on 31 May, 2024 ●
JFSA-2024-001033988
libxmljs attrs type confusion RCEhighCVE-2024-34391
CVE-2024-34391
CVE-2024-34391
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001034098
libxmljs2 namespaces type confusion RCEhighCVE-2024-34394
CVE-2024-34394
CVE-2024-34394
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001034097
libxmljs2 attrs type confusion RCEhighCVE-2024-34393
CVE-2024-34393
CVE-2024-34393
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001034096
libxmljs namespaces type confusion RCEhighCVE-2024-34392
CVE-2024-34392
CVE-2024-34392
high
Discovered ByUriya Yavnieli●
Published on 2 May, 2024 ●
JFSA-2024-001031292
sqlparse stack exhaustion DoShighCVE-2024-4340
CVE-2024-4340
CVE-2024-4340
high
Discovered ByUriya Yavnieli●
Published on 30 Apr, 2024 ●