Back
Tamir Friedman_Headshot1

Tamir Friedman

JFrog Security Researcher

Tamir is a Security Researcher on the JFrog Security Research team focused on advanced threat intelligence. His work centers on dissecting complex open-source codebases to analyze, evaluate and document novel zero-day vulnerabilities and critical security flaws (CVEs) before they can be exploited by threat actors.

The Latest From Tamir Friedman

  • Where Severity Scores Go Wrong: “Just Add Prototype Pollution”
    | 11 min read

    At JFrog, our Security Research team continuously monitors and analyzes newly disclosed CVEs across the open-source ecosystem. Throughout our research, we have repeatedly observed cases where the assigned severity score does not accurately reflect a vulnerability's real-world impact or exploitability. In fact, during 2025, JFrog researchers reassessed NVD critical-severity vulnerabilities and concluded that 96% warranted…

    Read More