Skip to content
OpenAdvisories

Product · jfrog

artifactory

54 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-70548

    SSRF In CocoaPods Via JFrog Artifactory External Dependency

    Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency.

    jfrog artifactory
  • Low 3.1
    CVE-2026-65926

    Private Release Bundle versions may be disclosed under specific configurations

    An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.

    jfrog artifactory