JFrog Security Research

Attackers are actively exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution vulnerability in Langflow's `/api/v1/validate/code` endpoint, to steal OpenAI, AWS, Anthropic, and GCP…

JFrog Security Research reported that 54 of 55 CVE advisories published from a new GitHub account were AI-hallucinated, with six targeting SQLite and all six entering the National Vulnerability Databa…

JFrog Security Research disclosed 'PixelSmash', a critical vulnerability in the FFmpeg media framework that has persisted for sixteen years, allowing remote code execution and denial-of-service attack…