AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

Packages

JFrog security advisories

43 advisories · 18 critical or high in 12 months · latest Aug 28

Advisories page

43 advisories

Critical 9.8Aug 28JFrog artifactory: improper authenticationCVE-2026-82329fixed in 7.111.21 +3Low 3.5Aug 25JFrog artifactory: server-side request forgeryCVE-2026-70548fixed in 7.161.19 +1Medium 6.5Aug 25JFrog artifactory: missing authorizationCVE-2026-70550fixed in 7.161.19 +1High 8.5Aug 25JFrog artifactory: server-side request forgeryCVE-2026-70551fixed in 7.161.19 +1High 7.6Aug 25JFrog artifactory: information disclosureCVE-2026-69104fixed in 7.161.19High 8.8Aug 12JFrog artifactory: improper input validationCVE-2026-69106fixed in 7.146.28High 7.5Aug 12JFrog artifactory: improper authenticationCVE-2026-42018fixed in 7.111.20 +3Medium 4.3Aug 12JFrog artifactory: missing authorizationCVE-2026-70547fixed in 7.161.16High 8.1Aug 12JFrog artifactory: insufficient authenticity checkCVE-2026-69105fixed in 7.161.16Medium 5.9Aug 12JFrog artifactory: missing authorizationCVE-2026-69107fixed in 7.104.16 +3High 7.2Aug 12JFrog artifactory: improper signature checkCVE-2026-68759fixed in 7.146.35 +1Medium 6.5Aug 12JFrog artifactory: missing authorizationCVE-2026-68758fixed in 7.146.35 +1Medium 6.7Aug 12JFrog artifactory: cleartext storageCVE-2026-66016fixed in 7.146.35 +1Medium 5.3Aug 12JFrog artifactory: path traversalCVE-2026-66384fixed in 7.146.35 +1Low 3.1Aug 12JFrog artifactory: missing authorizationCVE-2026-65926fixed in 7.146.35 +1Medium 6.5Aug 12JFrog artifactory: missing authorizationCVE-2026-68754fixed in 7.146.35 +1Medium 4.3Aug 12JFrog artifactory: improper authorizationCVE-2026-68755fixed in 7.146.35 +1Medium 6.6Aug 12JFrog artifactory: unsafe deserializationCVE-2026-68756fixed in 7.146.35 +1High 7.5Aug 12JFrog artifactory: improper signature checkCVE-2026-68757fixed in 7.146.35 +1Medium 5.3Aug 12JFrog artifactory: authentication bypassCVE-2026-68760fixed in 7.146.35 +1High 7.2Aug 12JFrog artifactory: improper privilege managementCVE-2026-68752fixed in 7.146.35Medium 5.3Aug 12JFrog artifactory: missing authorizationCVE-2026-68753fixed in 7.146.35 +1Medium 5.3Aug 12JFrog artifactory: path traversalCVE-2026-66381fixed in 7.146.35 +1Medium 4.3Aug 12JFrog artifactory: path traversalCVE-2026-66382fixed in 7.146.35 +1High 8.1Aug 12JFrog artifactory: missing authorizationCVE-2026-66375fixed in 7.146.35 +1Medium 4.2Aug 12JFrog artifactory: insufficient session expirationCVE-2026-66376fixed in 7.146.35 +1Medium 5.3Aug 12JFrog artifactory: missing authorizationCVE-2026-66377fixed in 7.146.35 +1Medium 4.3Aug 12JFrog artifactory: missing authorizationCVE-2026-66378fixed in 7.146.35 +1Medium 4.3Aug 12JFrog artifactory: missing authorizationCVE-2026-66379fixed in 7.146.35 +1Medium 4.3Aug 12JFrog artifactory: missing authorizationCVE-2026-66380fixed in 7.146.35 +1Medium 6.5Jul 27JFrog artifactory: information disclosureCVE-2026-66018fixed in 7.146.34 +1Medium 6.5Jul 27JFrog artifactory: server-side request forgeryCVE-2026-65618fixed in 7.133.6High 8.8Jul 27JFrog artifactory: path traversalCVE-2026-65921fixed in 7.111.18 +3High 7.1Jul 27JFrog artifactory: missing authorizationCVE-2026-65922fixed in 7.111.18 +3Medium 6.8Jul 27JFrog artifactory: server-side request forgeryCVE-2026-65923fixed in 7.111.18 +3Medium 6.5Jul 27JFrog artifactory: server-side request forgeryCVE-2026-65924fixed in 7.111.18 +3Medium 6.5Jul 27JFrog artifactory: server-side request forgeryCVE-2026-65925fixed in 7.111.18 +3High 8.8Jul 27JFrog artifactory: privilege escalationCVE-2026-66014fixed in 7.111.18 +3High 7.2Jul 27JFrog artifactory: privilege escalationCVE-2026-66015fixed in 7.146.34 +1High 8.8Jul 27JFrog artifactory: improper authorizationCVE-2026-65616fixed in 7.146.27High 8.8Jul 27JFrog artifactory: unsafe deserializationCVE-2026-65617fixed in 7.111.18 +3High 8.1Jul 27JFrog artifactory: privilege escalationCVE-2026-42016fixed in 7.133.11High 8.8Jul 27JFrog artifactory: information disclosureCVE-2026-42017fixed in 7.133.21 +1
About JFrog

Security advisories JFrog publishes for its own products.

www.jfrog.com/confluence/display/RTF/Fixed+Security+VulnerabilitiesJFrog

JFrog elsewhere on Ibis: Quarterly · Paydays