JFrog Artifactory: known vulnerabilities by version

JFrog lists 359 JFrog Artifactory self-managed 7.x versions. 352 of them carry at least one known CVE by NVD's exact CPE match or JFrog's advisories and have a page here; 7 are free of known CVEs. 63 CVEs are on record. Latest release: 7.161.29 (September 15, 2026).

Sources: NVD (exact CPE match and the published configurations), the CVE Program record (the vendor's CNA entry with its affected and fixed versions), JFrog's security advisories, release notes and end-of-life page. Pulled September 18, 2026. Every CVE row links to its NVD record and to the vendor's advisory.

Check an Artifactory version

Paste the version your server reports. Build suffixes such as -02 and a leading v are fine.

Every version, by branch

Newest branch first. Each version shows its known-CVE count and JFrog's end-of-life status. A version without a link has no known CVE and no page.

7.161.x

7.146.x

7.133.x

7.125.x

7.117.x

7.111.x

7.104.x

7.98.x

7.90.x

7.85.x

7.84.x

7.82.x

7.77.x

7.76.x

7.71.x

7.68.x

7.66.x

7.63.x

7.59.x

7.58.x

7.55.x

7.49.x

7.47.x

7.46.x

7.41.x

7.39.x

7.38.x

7.37.x

7.36.x

7.35.x

7.33.x

7.31.x

7.29.x

7.28.x

7.27.x

7.25.x

7.24.x

7.23.x

7.21.x

7.19.x

7.18.x

7.17.x

7.16.x

7.15.x

7.12.x

7.11.x

7.10.x

7.9.x

7.8.x

7.7.x

7.6.x

7.5.x

7.4.x

7.3.x

7.2.x

7.1.x

7.0.x

About this page and CloudRepo

CloudRepo is a managed artifact repository, so there is no Artifactory or Nexus server for you to patch. In over 10 years of operation, CloudRepo has experienced no known security breaches. This page is not a scan of your server: the data is NVD's and the vendor's, linked on every row, pulled on September 18, 2026.

Looking for Sonatype Nexus Repository? Every Sonatype Nexus Repository version.