JFrog Security Research
jfrog-security-research · B · candidate
Added 2026-10-28 (S3): original vulnerability research with reproductions (Brotli2Shell reach into FFmpeg and ClickHouse, cited by the Node2Shell entry); the feed https://research.jfrog.com/rss.xml carries dated posts and article bodies read with `extract`. Candidate: promote to active after 3 contributing runs.
Cited in 8 entries
Citation cadence
Citation days per ISO week (21 weeks of coverage span, total 8).
- CVE-2026-111497, Node.js and Google Brotli (Node2Shell): an out-of-bounds write in the Brotli decoder lets crafted compressed data run code, reached through fetch() and Express 5 or body-parser 2 request bodies; fixed in Node.js 22.23.4, 24.22.1 and 26.12.1 and in the PyPI packages Brotli 1.2.1 and brotlicffi 1.2.1.0 (CVSS 4.0 9.2)2026-10-24
- BSI and NCSC-NL withdraw SQLite advisories built on LLM-fabricated CVEs, and GitHub's advisory database was still serving one of them2026-08-04
- Hijacked npm and Go packages weaponise VS Code's folderOpen task autorun to drop a credential-stealing Python implant2026-06-30
- CVE-2026-43503, Linux kernel "DirtyClone": page-cache corruption via XFRM/IPsec skb cloning (working PoC)2026-06-27
- PostCSS npm typosquats deliver a Nuitka-compiled Python RAT with Chrome DPAPI credential theft2026-06-24
- Mastra npm supply-chain compromise (easy-day-js)2026-06-18
- TeamPCP open-sources its Mini Shai-Hulud framework, spawning a new "Phantom Gyp" derivative2026-06-09
- IronWorm: Rust-built npm worm ships an eBPF kernel rootkit, Tor C2 and a cloud/AI-credential sweep2026-06-06