medium4.3
CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions.
Impact
An authenticated user without repository read permission may access private NuGet metadata under specific conditions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfrog | Artifactory | before 7.146.35 from 7.161.0 before 7.161.16 |