JFrog Security Research

Beta9 build sandbox escape via chroot-only isolation

Beta9 container escape via unvalidated sandbox file paths

Beta9 host filesystem exposure via volume path traversal

Prefab UI Pyodide sandbox escape to host RCE

LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion

Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains

Tauri framework v2 malicious downgrade via allow_downgrades from frontend code

Tauri framework v2 SSRF Protection Bypass via HTTP Redirects