[SECURITY] Fedora 44 Update: jfrog-cli-2.126.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-4d9c47d35a)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4d9c47d35a advisory. Update to 2.126.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 46 : jfrog-cli (2026-0c676ec15e)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c676ec15e advisory. Automatic update for jfrog-cli-2.127.0-1.fc46. Changelog Thu Oct 15 2026 Dominik 'Rathann' Mierzejewski - 2.127.0-1 - update to 2.127.0 resolves rhbz2550701 ...

CVE-2026-92892

A flaw was found in JFrog CLI. Under specific configurations, a remote attacker can achieve arbitrary code execution on the host running the utility by exploiting improper command argument handling. Successful exploitation allows the attacker to run unauthorized commands within the context of the...

OPENSUSE-SU-2026:12130-1 jfrog-cli-2.127.0-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.127.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-92892 Potential command execution on the host running JFrog CLI.

Potential arbitrary code execution, under specific configurations...

CVE-2026-92892 Potential command execution on the host running JFrog CLI.

Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later...

CVE-2026-92892

The JFrog CLI is vulnerable to potential arbitrary code execution on the host machine under specific configurations. The root cause is identified as CWE-88 (Improper Neutralization of Argument Delimiters in a Command), leading to argument injection . The vulnerability has a CRITICAL CVSS v3.1 sco...

jfrog-cli-2.122.0-1.1 on GA media (moderate)

jfrog-cli-2.122.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11631-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA...

OPENSUSE-SU-2026:11631-1 jfrog-cli-2.122.0-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.122.0-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 44 Update: jfrog-cli-2.120.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-39186e6ecd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-39186e6ecd advisory. Update to 2.120. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

[SECURITY] Fedora 44 Update: jfrog-cli-2.119.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-9f70b173c8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f70b173c8 advisory. Update to 2.119.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: rancher-agent, helm-exporter, helm-mapkubeapis, kube-mgmt, vcluster, kubescape-server, headlamp, kyverno-notation-aws, ocm-cli-fips, gitness, kgateway-fips, xeol-fips, kubescape, tigera-operator-fips, cilium-cli, crossplane, linkerd2, k9s, argocd-image-updater-fips,...

[SECURITY] Fedora 44 Update: jfrog-cli-2.112.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

jfrog-cli-2.104.1-1.1 on GA media (moderate)

jfrog-cli-2.104.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10844-1 Rating: moderate Cross-References: CVE-2025-11579 CVSS scores: CVE-2025-11579 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-11579 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA...

OPENSUSE-SU-2026:10844-1 jfrog-cli-2.104.1-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.104.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: tfsec, chainctl-fips, chainctl, external-secrets-operator-fips, apko, cg, src-fingerprint, osv-scanner, grafana-alloy, kubescape-server, packer, dagger, guac, pulumi-language-yaml, src-fingerprint-fips, pulumi-kubernetes-operator, grafana, mapotf, xeol-fips, kubescap...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: tfsec, chainctl-fips, chainctl, external-secrets-operator-fips, apko, cg, src-fingerprint, osv-scanner, grafana-alloy, kubescape-server, packer, dagger, guac, pulumi-language-yaml, src-fingerprint-fips, pulumi-kubernetes-operator, grafana, mapotf, xeol-fips, kubescap...