Synced 11 Oct 2026 15:47 UTC Account

Is JFrog Artifactory 7.90.19 patched?

JFrog · cycle 7.90 · end of life · Official site ↗
7.90.1920/100Critical · exploited

Current stable (7.161.26): 100/100

Minimum safe version7.146.38

7.90.19 has 13 open critical-or-high vulnerabilities. Run 7.146.38 or later to clear them. See what 7.146.38 fixes →

Health score20/100
Open issues33
Exploited now3
Cycle 7.90 EOL2026-01-25
Latest release7.161.26

Summary iPlain-English security status for JFrog Artifactory 7.90.19, built from its CVEs, active-exploitation data, end-of-life date and latest release.

JFrog Artifactory 7.90.19 is part of the 7.90 release line. 3 actively-exploited vulnerabilities affect it (CISA KEV). The minimum safe version is 7.146.38 — upgrade to it or later to clear the open critical/high issues. The 7.90 line reached end-of-life on 2026-01-25, so it no longer receives security patches. The latest supported JFrog Artifactory release is 7.161.26.

Known issues affecting 7.90.19

Exploited first, then by exploitation probability.

CVE-2026-42018 HIGH exploited EPSS 10% → fixed in 7.146.8 CVE-2026-42016 HIGH exploited EPSS 1% → fixed in 7.133.11 CVE-2026-66384 MEDIUM exploited EPSS 0% → fixed in 7.161.16 CVE-2026-66014 HIGH EPSS 1% → fixed in 7.161.15 CVE-2026-68760 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-65921 HIGH EPSS 0% → fixed in 7.161.15 CVE-2026-69106 HIGH EPSS 0% → fixed in 7.146.28 CVE-2026-68756 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-68752 HIGH EPSS 0% → fixed in 7.146.35 CVE-2026-69107 MEDIUM EPSS 0% → fixed in 7.146.8 CVE-2026-65617 HIGH EPSS 0% → fixed in 7.161.15 CVE-2026-66381 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-42017 HIGH EPSS 0% → fixed in 7.146.8 CVE-2026-66375 HIGH EPSS 0% → fixed in 7.161.16 CVE-2026-68758 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-66382 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-66377 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-68753 MEDIUM EPSS 0% → fixed in 7.161.16 CVE-2026-68759 HIGH EPSS 0% → fixed in 7.161.16 CVE-2026-68754 MEDIUM EPSS 0% → fixed in 7.161.16

Other JFrog Artifactory versions

Check another release line of JFrog Artifactory.

JFrog Artifactory 7.161.26JFrog Artifactory 7.146.39JFrog Artifactory 7.133.30JFrog Artifactory 7.125.21JFrog Artifactory 7.117.29JFrog Artifactory 7.111.22JFrog Artifactory 7.104.17JFrog Artifactory 7.98.19JFrog Artifactory 7.84.23JFrog Artifactory 7.77.17JFrog Artifactory 7.71.25JFrog Artifactory 7.68.23JFrog Artifactory 7.63.22JFrog Artifactory 7.59.22JFrog Artifactory 7.55.17JFrog Artifactory 7.49.10JFrog Artifactory 7.47.16JFrog Artifactory 7.46.23JFrog Artifactory 7.41.14JFrog Artifactory 7.39.10JFrog Artifactory 7.38.17JFrog Artifactory 7.37.17JFrog Artifactory 7.35.2JFrog Artifactory 7.33.9JFrog Artifactory 7.31.12JFrog Artifactory 7.29.9JFrog Artifactory 7.27.10JFrog Artifactory 7.25.7JFrog Artifactory 7.24.7

Frequently asked

Is JFrog Artifactory 7.90.19 patched?

No — 3 actively-exploited vulnerabilities affect JFrog Artifactory 7.90.19. Upgrade to at least 7.146.38.

What version should I upgrade JFrog Artifactory 7.90.19 to?

Upgrade JFrog Artifactory 7.90.19 to at least 7.146.38 to clear its 13 open critical-or-high vulnerabilities.

When does JFrog Artifactory 7.90 reach end-of-life?

JFrog Artifactory 7.90 reached end-of-life on 2026-01-25 and no longer receives security patches.

What is the latest version of JFrog Artifactory?

The latest supported JFrog Artifactory release is 7.161.26.

Is JFrog Artifactory 7.90.19 still receiving security updates?

No — JFrog Artifactory 7.90.19 is on the 7.90 line, which reached end-of-life on 2026-01-25 and no longer receives security updates. Upgrade to 7.161.26 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against JFrog's official advisory before you patch or upgrade — JFrog Artifactory official site ↗