Auth is off by default. One unauthenticated POST -> shell. 🚨 Two unauthenticated RCEs in the Bifrost AI Gateway, found by JFrog Research 🚨 Technical details >> research.jfrog.com/vulnerabi… research.jfrog.com/vulnerabi…

🚨 Anatomy of a Live npm Supply-Chain Campaign: "Equation of Compromise" Threat actors are targeting developers with trojanized math libraries. The payload doesn't run for everyone, it only decrypts when the victim's code solves one specific linear matrix. Read the full teardown of the trigger, payloads, and threat actor infrastructure on our blog: research.jfrog.com/post/equa…

CVSS 10.0, but the evidence doesn't add up... again. CVE-2026-82617 ReDoS vulnerability received a CVSS 10.0 from Apache. ❌ No arbitrary code execution ❌ No data disclosure ❌ Not enabled by default The impact is limited to denial of service, and exploitation requires the application to explicitly opt in to the vulnerable name-finder functionality and process attacker-controlled input. ⚠️ Don't rely on the CVE severity score alone. Assess the actual exploitability and impact in your environment.

🚨 Parallels Desktop runs as root, and that can be exploited now! 🚨 Our team discovered a 0-day LPE vulnerability: CVE-2026-90894. Any local user can gain root access, no need for admin group. Fix immediately by upgrading to version 27.0.0. Full technical details on our blog >> research.jfrog.com/vulnerabi…

The JFrog Security Research team investigated the GemStuffer campaign run by rogue OpenAI agents and uncovered over 3,000 malicious RubyGems packages, beyond initial estimates. The wildest part? The AI left distinct fingerprints across the registry. How the agent swarm operated and the full list of 3,000+ packages: research.jfrog.com/post/gems…

🚨NextJS, Sharp and ImagicMagick affected by Critical libheif vulnerability 🚨 A heap buffer overflow CVE-2026-84383 in libheif (along with 10 other vulnerabilities) has been reported to result in RCE when parsing malformed HEIC/HEIF/AVIF images. Popular web tools parsing AVIFS like @nextjs and sharp were reported as affected. The JFrog security research team found that @ImageMagick is also affected by the vulnerability and verified a DoS POC. Users are recommended to upgrade: - libheif to version 1.23.2 - sharp to version 0.35.4 - next.js to versions 15.5.24 or 16.3.3 🔎 Note that other popular tools utilizing libheif may be affected.

CVSS 9.8, but the code doesn't add up. CVE-2026-47890 and CVE-2026-59313 in Spring claim critical impact, but: ❌Same root cause: a stray \r corrupting an SSE stream ❌Spring scores both 2.6, Low, same vector ❌CISA scores both 9.8, Critical, no server-side compromise possible And it's not an isolated case: of 6 Critical-rated Spring CVEs published the same day, only 1 holds up against Spring's own advisory. ⚠️Don't take a CISA score at face value. Verify against the vendor advisory before patching or prioritizing. Read our full analysis:research.jfrog.com/post/when…

Well said, @rauchg. The entire industry is in a race against attackers, moving at the pace that cyber-capable models now set. No company wins this fight alone. Cybersecurity's future depends on partnership across researchers, vendors, customers, and AI labs. A bit more color on CVE-2026-82329 for anyone following along: 1/ it is unrelated to the OpenAI/Hugging Face incident (we've been working closely with OpenAI on that one), 2/ it is improper authentication rather than RCE, and 3/ it does not affect the JFrog SaaS platform, only self-hosted deployments. You saw the same dynamic with Next.js CVE-2025-29927 (CVSS 9.1), which hit self-hosted apps but not Vercel's platform. Our job as platform providers is to detect, remediate fast, and keep giving customers a clear path forward. In the long run, defenders win. The same AI that probes for weaknesses will find, patch, and harden faster than attackers can exploit, and the software supply chain, including the binaries system of record, comes out healthier than it has ever been.

Read our full technical analysis at: research.jfrog.com/post/shai…

🚨 SUPPLY CHAIN ALERT: Popular npm package @7nohe/openapi-react-query-codegen (~200K downloads/mo) was compromised on Aug 28. Threat actors hijacked an insecure GitHub Actions workflow to publish 10 malicious versions carrying a Bun-based malware payload. Compromised Versions: 0.5.4, 0.5.5 1.6.3, 1.6.4 2.2.1, 2.2.2 3.0.3, 3.0.4 0.0.0-365d4eb738d3146583431948d3ba6e27a32556be 0.0.0-ec7876d6c917dad516ba69bbfafc948b834bf0ab

Read the full details on our blog: research.jfrog.com/post/arra…

JFrog Catalog users can leverage the public label to stay updated on packages targeted in the ongoing Shai Hulud wave

The wave is ongoing, current stats: 456 packages, 2244 versions.

🚨 Our research team has identified a new supply chain attack targeting npm. Keyv (150M weekly downloads) 6.0.0 is compromised with a malicious payload. More details will be shared soon.