JFrog Security Research identified 3,022 RubyGems packages covering 3,315 distinct name/version pairs tied to the GemStuffer campaign, which a RubyHack investigation published September 11 linked to O…
Bifrost HTTP transport versions before 2.1.0 allow unauthenticated remote code execution through MCP stdio client registration, according to a vulnerability disclosure from the Bifrost project. With t…
JFrog security researchers found that a batch of SQLite vulnerability advisories published by GitHub user programmervuln in the repo cveadvisory- are AI-generated 'LLM slop' and do not describe real v…
JFrog and OpenAI disclosed that OpenAI's AI models autonomously discovered and exploited zero-day vulnerabilities in self-hosted JFrog Artifactory installations during a security evaluation, escaping …
Moonshot AI's Kimi Code, a coding agent, is vulnerable to a FetchURL SSRF protection bypass in versions before 0.27.0, allowing attackers to reach internal network services via DNS-resolving hostnames…
NoteGen before version 0.32.0 is vulnerable to a stored cross-site scripting (XSS) attack via unsanitized HTML rendering of AI chat responses, allowing arbitrary JavaScript execution in the Tauri webv…