jfrog-cli | Snyk

Direct Vulnerabilities

Known vulnerabilities in the jfrog-cli package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-97032	<2.126.0-r2
L CVE-2026-97031	<2.126.0-r1
L GHSA-hq7w-2xrq-wp2j	<2.126.0-r1
L CVE-2026-94439	<2.126.0-r1
L CVE-2026-94448	<2.126.0-r1
L GHSA-22jx-p735-qcpm	<2.126.0-r1
L CVE-2026-78663	<2.126.0-r2
L CVE-2026-94440	<2.126.0-r1
L CVE-2026-56866	<2.126.0-r1
L GHSA-wpfx-qch4-q5j2	<2.126.0-r1
L CVE-2026-78669	<2.126.0-r2
L CVE-2026-97030	<2.126.0-r1
L CVE-2026-78659	<2.126.0-r2
L GHSA-2gfw-j3c5-j46w	<2.126.0-r1
L GHSA-f5vf-8pvc-394g	<2.126.0-r1
L GHSA-874m-fcc5-9gqf	<2.126.0-r1
L Improper Validation of Array Index	<2.124.0-r1
L GHSA-2v4p-qf9q-27wj	<2.124.0-r1
L CVE-2026-56855	<2.122.0-r3
L CVE-2026-78662	<2.122.0-r3
L GHSA-vp52-pcj8-j9qc	<2.122.0-r2
L Resource Exhaustion	<2.122.0-r2
L CVE-2026-46600	<2.120.0-r1
L GHSA-c974-w86c-vpfw	<2.120.0-r1
L CVE-2026-56858	<2.120.0-r1
L GHSA-76p8-fhrm-vpc7	<2.120.0-r1
L CVE-2026-39821	<2.120.0-r1
L GHSA-7qch-w8m5-g3h3	<2.120.0-r1
L CVE-2026-56862	<2.120.0-r1
L GHSA-25mv-j2qr-v5jq	<2.120.0-r1
L GHSA-w2q5-6q6x-x959	<2.120.0-r1
L CVE-2026-33818	<2.120.0-r1
L GHSA-gg3m-vvp2-p2c5	<2.120.0-r1
L GHSA-xc2p-8ggw-6cr5	<2.120.0-r1
L CVE-2026-56859	<2.120.0-r1
L CVE-2026-56860	<2.120.0-r1
L GHSA-qgq7-7hm3-q39j	<2.117.0-r2
L Directory Traversal	<2.117.0-r2
L GHSA-hc8v-wwc9-vgxm	<2.117.0-r2
L Link Following	<2.117.0-r2
L Use of a Key Past its Expiration Date	<2.117.0-r1
L GHSA-wqqc-jjcq-vfxm	<2.117.0-r1
L CVE-2026-56852	<2.116.0-r2
L GHSA-jpjm-c3r5-q96r	<2.116.0-r2
L GHSA-hrxh-6v49-42gf	<2.116.0-r1
L Directory Traversal	<2.115.0-r0
L GHSA-fxhp-mv3v-67qp	<2.115.0-r0
L Cleartext Transmission of Sensitive Information	<2.112.0-r0
L GHSA-xf85-363p-868w	<2.112.0-r0
L External Control of File Name or Path	<2.112.0-r0
L Symlink Following	<2.112.0-r0
L GHSA-33vj-92qq-66hc	<2.112.0-r0
L CVE-2026-50195	<2.112.0-r0
L GHSA-8xwf-rjm4-xvhv	<2.112.0-r0
L GHSA-vh4v-2xq2-g5cg	<2.112.0-r0
L GHSA-rgh6-rfwx-v388	<2.112.0-r0
L GHSA-jxpm-75mh-9fp7	<2.112.0-r0
L Improper Input Validation	<2.112.0-r0
L Server-Side Request Forgery (SSRF)	<2.112.0-r0
L GHSA-cvxm-645q-p574	<2.112.0-r0
L CVE-2026-47262	<2.109.0-r1
L GHSA-f5wc-c3c7-36mc	<2.104.1-r2
L GHSA-w879-237q-wc7r	<2.104.1-r2
L GHSA-rm3j-f69w-wqmq	<2.104.1-r2
L Improper Input Validation	<2.109.0-r1
L GHSA-xhf5-7wjv-pqxp	<2.109.0-r1
L GHSA-jpcc-p29g-p8mq	<2.109.0-r1
L GHSA-78mq-xcr3-xm33	<2.104.1-r2
L GHSA-q4h4-gmj2-qvw2	<2.104.1-r2
L GHSA-qpw4-5x99-6vjp	<2.104.1-r2
L GHSA-89gr-r52h-f8rx	<2.104.1-r2
L GHSA-vgwf-h737-ff37	<2.104.1-r2
L Improper Certificate Validation	<2.104.1-r2
L Improper Verification of Cryptographic Signature	<2.104.1-r2
L Incorrect Type Conversion or Cast	<2.104.1-r2
L Deserialization of Untrusted Data	<2.104.1-r2
L Out-of-Bounds	<2.104.1-r2
L Integer Overflow or Wraparound	<2.104.1-r2
L Missing Authorization	<2.104.1-r2
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<2.104.1-r2
L Improper Privilege Management	<2.104.1-r1
L GHSA-fqw6-gf59-qr4w	<2.104.1-r1
C Improper Encoding or Escaping of Output	<2.104.0-r1
L GHSA-m7cr-m3pv-hgrp	<2.104.0-r1
L GHSA-crhj-59gh-8x96	<2.104.0-r1
L Directory Traversal	<2.104.0-r1
L GHSA-389r-gv7p-r3rp	<2.103.0-r2
H Incorrect Behavior Order: Validate Before Canonicalize	<2.103.0-r2
L CVE-2026-42499	<2.103.0-r1
L GHSA-497x-jcxf-m478	<2.103.0-r1
L GHSA-8g2r-hhvj-mv99	<2.103.0-r1
H NULL Pointer Dereference	<2.103.0-r1
L Cross-site Scripting (XSS)	<2.103.0-r1
H Allocation of Resources Without Limits or Throttling	<2.103.0-r1
M Out-of-bounds Write	<2.103.0-r1
L GHSA-3v2c-x6q9-f697	<2.103.0-r1
L GHSA-p9h5-jm8x-mjm5	<2.103.0-r1
L GHSA-5m4p-2gjx-p2g8	<2.103.0-r1
L GHSA-2283-wf8c-rw8r	<2.103.0-r1
H Double Free	<2.103.0-r1
L CVE-2026-42501	<2.103.0-r1
M Link Following	<2.103.0-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2.103.0-r1
L Improper Encoding or Escaping of Output	<2.103.0-r1
L GHSA-qf3q-3h68-mmh2	<2.103.0-r1
L GHSA-xq5j-9r39-c3vf	<2.103.0-r1
L GHSA-qc64-m6c2-v4x7	<2.103.0-r1
L GHSA-pmwq-pjrm-6p5r	<2.103.0-r1
H Insufficiently Protected Credentials	<2.101.0-r0
L GHSA-3xc5-wrhm-f963	<2.101.0-r0
L GHSA-xm5m-wgh2-rrg3	<2.100.0-r1
L Improper Certificate Validation	<2.100.0-r1
L GHSA-hr2v-4r36-88hr	<2.100.0-r1
M Cross-site Scripting (XSS)	<2.106.0-r0
M Allocation of Resources Without Limits or Throttling	<2.106.0-r0
L GHSA-m4pr-4j3g-9v7v	<2.106.0-r0
H Allocation of Resources Without Limits or Throttling	<2.106.0-r0
L GHSA-jrg3-gfjw-hm96	<2.106.0-r0
L CVE-2026-32280	<2.106.0-r0
H Improper Certificate Validation	<2.106.0-r0
H Incorrect Authorization	<2.106.0-r0
L GHSA-x4jj-h2v8-hqqv	<2.106.0-r0
L GHSA-gjvh-7jh8-7xhm	<2.106.0-r0
M Directory Traversal	<2.100.0-r1
L GHSA-5w89-2c2x-6x66	<2.106.0-r0
L GHSA-7mr4-xjxg-34g6	<2.106.0-r0
L GHSA-pxq6-2prw-chj9	<2.98.0-r0
L GHSA-x744-4wpc-v9h2	<2.98.0-r0
H Authentication Bypass	<2.98.0-r0
H Off-by-one Error	<2.98.0-r0
L Improper Validation of Array Index	<2.96.0-r2
L GHSA-jhf3-xxhw-2wpp	<2.97.0-r1
L GHSA-gm2x-2g9h-ccm8	<2.97.0-r1
L Integer Underflow	<2.97.0-r1
L Improper Validation of Array Index	<2.97.0-r1
L GHSA-6g7g-w4f8-9c9x	<2.96.0-r2
L Improper Authorization	<2.96.0-r1
L GHSA-p77j-4mvh-x3m3	<2.96.0-r1

Vulnerability

Vulnerable Version

CVE-2026-97032

<2.126.0-r2