CVEs.

Vulnerabilities published in the last two years in software made by the companies on the wall: clients, SDKs, agents and self-hosted editions. A CVE here does not mean the hosted service was affected or breached.

NVD data refreshed 11 min ago

Severity of matching CVEs

CVSS base severity, as scored in NVD

Critical: 00%
High: 37100%
Medium: 00%
Low or not scored: 00%

Matching CVEs: 37; Last two years
Critical: 0; CVSS 9.0 and above
High: 37; CVSS 7.0 to 8.9
Known exploited: 2; On CISA's KEV list

Matching CVEs published

By month, last two years

Peak 11 · August 2026

Most CVEs

In each company's software, last two years

Matching CVEs

8.8High
CVE-2026-96455 (opens in a new tab)
The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Depends(get_app_manager), which just hands back the manager object from application state, so nothing in the chain ever checks a credential. The endpoint takes an AppInfo body naming a Hugging Face Space. The daemon downloads that Space and installs it as a Python package through install_package in src/reachy_mini/apps/sources/local_common_venv.py, using uv or pip. Installing a
JFrog· Sep 23, 2026
8.2High
CVE-2026-96454 (opens in a new tab)
Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with "remote": { "urls": ["https://*.*"] }. That wildcard tells Tauri to accept IPC from any HTTPS origin, not just the site the application was built to wrap. The second is "withGlobalTauri": true in src-tauri/tauri.conf.json, which puts window.__TAURI__.core.invoke() in reach of ordinary page JavaScript.
JFrog· Sep 23, 2026
7.7High
CVE-2026-95627 (opens in a new tab)
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.
JFrog· Sep 23, 2026
8.3High
CVE-2026-95626 (opens in a new tab)
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources remain active even when a nonce is present, allowing arbitrary script execution without knowing the nonce.
JFrog· Sep 23, 2026
7.8High
CVE-2026-90894 (opens in a new tab)
Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group. After login, PrlSrv_InstallAppliance lets you pick the appliance folder (sVmParentPath). The daemon unpacks with one string, tar -xf "%1" -C "%2", then Qt QProcess::splitCommand chops that string into words. A quote in the folder name closes early. The leftover text becomes extra tar flags. macOS tar --use-compress-program= runs the named program as root.
JFrog· Sep 14, 2026
8.1High
CVE-2026-86242 (opens in a new tab)
Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated POST /api/plugins when management authentication is disabled (the default, governance.auth_config.is_enabled=false). The shared-object loader treats an http-prefixed path as a download URL, writes the body to a temporary .so, and passes it to Go's plugin.Open. After a successful open, optional Init runs immediately with the supplied config as the Bifrost process user. On documented dynamically linked builds (DYNAMIC=1 / no static-link flags), which the vendor requires for cust
JFrog· Sep 6, 2026
8.8High
CVE-2026-82642 (opens in a new tab)
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <script> tag (FORBID_TAGS: ['script']) in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the contents of the srcdoc attribute on <iframe> elements, treating it as an opaque string attribute, so an attacker who can get an <iframe> element to survive sanitization can embed a complete HTML document containing a <script> tag inside srcdoc and have it execute when the browser renders the ifr
JFrog· Aug 30, 2026
8.8High
CVE-2026-82635 (opens in a new tab)
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization. A filename containing path traversal sequences (for example ../Library/LaunchAgents/com.evil.plist) or an absolute path resolves outside ~/Downloads. The command then fetches attacker-controlled content from the supplied URL (via Rust HTTP, not the browser) and writes it to that path. A script that can invoke the command can overwrite user-writable files and install persistence (macOS LaunchAgents, Linux autostart, Windows Startup), leading to
JFrog· Aug 30, 2026
8.5High
CVE-2026-70551 (opens in a new tab)
A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.
JFrog· Aug 25, 2026
7.6High
CVE-2026-69104 (opens in a new tab)
An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.
JFrog· Aug 25, 2026
8.8High
CVE-2026-69106 (opens in a new tab)
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.
JFrog· Aug 12, 2026
7.5High
CVE-2026-42018 (opens in a new tab)Known exploited
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
JFrog· Aug 12, 2026
8.1High
CVE-2026-69105 (opens in a new tab)
An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.
JFrog· Aug 12, 2026
7.2High
CVE-2026-68759 (opens in a new tab)
A holder of a valid integration credential may impersonate other users under specific conditions.
JFrog· Aug 12, 2026
7.5High
CVE-2026-68757 (opens in a new tab)
A user with access to a valid SAML response may impersonate another user under specific conditions.
JFrog· Aug 12, 2026
7.2High
CVE-2026-68752 (opens in a new tab)
A Project Resource Manager may gain broader administrative privileges under specific conditions.
JFrog· Aug 12, 2026
8.1High
CVE-2026-66375 (opens in a new tab)
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.
JFrog· Aug 12, 2026
7.2High
CVE-2026-66015 (opens in a new tab)
An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access.
JFrog· Jul 27, 2026
8.8High
CVE-2026-66014 (opens in a new tab)
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.
JFrog· Jul 27, 2026
8.8High
CVE-2026-65921 (opens in a new tab)
A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.
JFrog· Jul 27, 2026
8.8High
CVE-2026-65617 (opens in a new tab)
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.
JFrog· Jul 27, 2026
8.8High
CVE-2026-65616 (opens in a new tab)
Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.
JFrog· Jul 27, 2026
8.8High
CVE-2026-42017 (opens in a new tab)
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.
JFrog· Jul 27, 2026
8.8High
CVE-2026-42016 (opens in a new tab)Known exploited
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.
JFrog· Jul 27, 2026
8.3High
CVE-2026-17497 (opens in a new tab)
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.
JFrog· Jul 26, 2026
8.1High
CVE-2026-17496 (opens in a new tab)
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the
JFrog· Jul 26, 2026
8.8High
CVE-2026-8461 (opens in a new tab)
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.
JFrog· Jun 18, 2026
7.5High
CVE-2025-14542 (opens in a new tab)
The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.
JFrog· Dec 13, 2025
7.1High
CVE-2025-14261 (opens in a new tab)
The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.
JFrog· Dec 8, 2025
8.1High
CVE-2025-10854 (opens in a new tab)
The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhere in the filesystem when txtai is used to load untrusted embedding indices
JFrog· Sep 22, 2025
7.5High
CVE-2025-59358 (opens in a new tab)
The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service.
JFrog· Sep 15, 2025
7.6High
CVE-2025-9959 (opens in a new tab)
Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code.
JFrog· Sep 3, 2025
8.8High
CVE-2025-55345 (opens in a new tab)
Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinks being followed outside the allowed current working directory.
JFrog· Aug 13, 2025
7.5High
CVE-2025-32948 (opens in a new tab)
The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to create crafted playlists which will cause either denial of service or an attacker-controlled blind SSRF.
JFrog· Apr 15, 2025
7.5High
CVE-2025-32947 (opens in a new tab)
This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities.
JFrog· Apr 15, 2025
8.1High
CVE-2025-3445 (opens in a new tab)
A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the archiver.Unarchive functionality with ZIP files, like this: archiver.Unarchive(zipFile, outputDir), A crafted ZIP file can be extracted in such a way that it writes files to the affected system with the same privileges as the application executing this vulnerable functionality. Consequently, sensitive files may be ov
JFrog· Apr 13, 2025
7.0High
CVE-2024-27134 (opens in a new tab)
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
JFrog· Nov 25, 2024

Public information only

Everything on this page was already published by the companies themselves or by public bodies. statuswall gathers it in one place, links every item to its original, and adds nothing from private or leaked sources.

Sources

National Vulnerability Database (opens in a new tab): CVE IDs, descriptions, publication dates and CVSS severity, published by the U.S. government (NIST)
CISA Known Exploited Vulnerabilities catalog (opens in a new tab): the "Known exploited" flag

How fresh it is

New and changed CVEs: pulled from NVD every two hours; last run 11 min ago
Known-exploited flags: updated from CISA in the same run
Window: the last two years; older entries drop off automatically

Source: the U.S. National Vulnerability Database, refreshed daily, with the known-exploited flag from CISA's KEV catalog. Descriptions are NVD's. A CVE is listed under a company when NVD names that company's product as affected, or when the company's own CVE authority assigned it; companies whose names are common words are matched only by explicit rules, so some CVEs will be missing. This product uses NVD data but is not endorsed or certified by the NVD. CVE is a registered trademark of The MITRE Corporation.

statuswall is independent and is not affiliated with, sponsored by or endorsed by any company named here. Company and product names are used only to identify whose public information is being referred to. The information is provided as is, for general reference, with no guarantee that it is complete, current or free of error; it is not security, legal or purchasing advice. Where this page and an official source differ, the official source is right.