Jfrog: >> Artifactory >> 7.133.28 Security Vulnerabilities
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.
CVSS Score
4.3
EPSS Score
0.002
Published
2026-08-12
Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.
CVSS Score
8.8
EPSS Score
0.002
Published
2026-07-27
Page 3