EUVD-2026-57319

An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions...

EUVD-2026-57261

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability...

EUVD-2026-57260

An authenticated user without repository read permission may access package metadata under specific conditions...

EUVD-2026-57259

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

EUVD-2026-57258

A holder of a valid integration credential may impersonate other users under specific conditions...

EUVD-2026-57257

An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known...

EUVD-2026-57256

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...

EUVD-2026-57255

A low-privileged authenticated user may access restricted support information under specific conditions...

EUVD-2026-57254

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...

EUVD-2026-57253

A user with access to a valid SAML response may impersonate another user under specific conditions...

EUVD-2026-57250

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...

EUVD-2026-57249

An unauthenticated user may bypass authentication under specific cache conditions...

EUVD-2026-57247

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

EUVD-2026-57246

An unauthenticated user may access restricted repository information under specific conditions...

EUVD-2026-57245

A bundle writer may create misleading release promotion information under specific conditions...

EUVD-2026-57244

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...

EUVD-2026-57243

A repository publisher without delete permission may modify protected package content under specific conditions...

EUVD-2026-57241

Credentials for a deleted user may remain valid for a short period under specific conditions...

EUVD-2026-57240

A Project Resource Manager may gain broader administrative privileges under specific conditions...

EUVD-2026-57238

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...