Skip to content
OpenAdvisories

Vendor

jfrog

65 known vulnerabilities.

Products

artifactory 54 JFrog Artifactory 8 jfrog-cli 1 Artifactory (Workers) 1 Artifactory Self-Hosted 1 Artifactory < 7.68.19 0 Artifactory < 7.63.18 0 Artifactory < 7.59.18 0 Artifactory < 7.66.0 0 Artifactory < 7.46.3 0 Artifactory < 6.23.41 0 Artifactory < 7.37.13 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-70548

    SSRF In CocoaPods Via JFrog Artifactory External Dependency

    Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency.

    jfrog artifactory
  • Low 3.1
    CVE-2026-65926

    Private Release Bundle versions may be disclosed under specific configurations

    An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.

    jfrog artifactory
  • Low 3.1
    CVE-2021-23163

    JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific…

    jfrog JFrog Artifactory
  • Low 2.7
    CVE-2021-46270

    JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all…

    jfrog JFrog Artifactory