Skip to content

JFrog security advisories

43 advisories · 18 critical or high in 12 months · latest Aug 28

43 advisories

Advisory
JFrog artifactory: improper authentication
Critical9.8Aug 28
JFrog artifactory: server-side request forgery
Low3.5Aug 25
JFrog artifactory: missing authorization
Medium6.5Aug 25
JFrog artifactory: server-side request forgery
High8.5Aug 25
JFrog artifactory: information disclosure
High7.6Aug 25
JFrog artifactory: improper input validation
High8.8Aug 12
JFrog artifactory: improper authentication
High7.5Aug 12
JFrog artifactory: missing authorization
Medium4.3Aug 12
JFrog artifactory: insufficient authenticity check
High8.1Aug 12
JFrog artifactory: missing authorization
Medium5.9Aug 12
JFrog artifactory: improper signature check
High7.2Aug 12
JFrog artifactory: missing authorization
Medium6.5Aug 12
JFrog artifactory: cleartext storage
Medium6.7Aug 12
JFrog artifactory: path traversal
Medium5.3Aug 12
JFrog artifactory: missing authorization
Low3.1Aug 12
JFrog artifactory: missing authorization
Medium6.5Aug 12
JFrog artifactory: improper authorization
Medium4.3Aug 12
JFrog artifactory: unsafe deserialization
Medium6.6Aug 12
JFrog artifactory: improper signature check
High7.5Aug 12
JFrog artifactory: authentication bypass
Medium5.3Aug 12
JFrog artifactory: improper privilege management
High7.2Aug 12
JFrog artifactory: missing authorization
Medium5.3Aug 12
JFrog artifactory: path traversal
Medium5.3Aug 12
JFrog artifactory: path traversal
Medium4.3Aug 12
JFrog artifactory: missing authorization
High8.1Aug 12
JFrog artifactory: insufficient session expiration
Medium4.2Aug 12
JFrog artifactory: missing authorization
Medium5.3Aug 12
JFrog artifactory: missing authorization
Medium4.3Aug 12
JFrog artifactory: missing authorization
Medium4.3Aug 12
JFrog artifactory: missing authorization
Medium4.3Aug 12
JFrog artifactory: information disclosure
Medium6.5Jul 27
JFrog artifactory: server-side request forgery
Medium6.5Jul 27
JFrog artifactory: path traversal
High8.8Jul 27
JFrog artifactory: missing authorization
High7.1Jul 27
JFrog artifactory: server-side request forgery
Medium6.8Jul 27
JFrog artifactory: server-side request forgery
Medium6.5Jul 27
JFrog artifactory: server-side request forgery
Medium6.5Jul 27
JFrog artifactory: privilege escalation
High8.8Jul 27
JFrog artifactory: privilege escalation
High7.2Jul 27
JFrog artifactory: improper authorization
High8.8Jul 27
JFrog artifactory: unsafe deserialization
High8.8Jul 27
JFrog artifactory: privilege escalation
High8.1Jul 27
JFrog artifactory: information disclosure
High8.8Jul 27
About JFrog

Security advisories JFrog publishes for its own products.

JFrog elsewhere on fru.dev: Quarterly · Paydays

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.