[ Vendor · 103 CVEs ]

frappe

CVEs affecting frappe published in the last 30 days, plus any frappe CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-108734 11 Oct 2026 CVSS 4.3 frappe crmFrappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_document that allows authenticated…
CVE-2026-101006 28 Sep 2026 CVSS 4.3 Frappe HRA flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function…
CVE-2026-96672 23 Sep 2026 CVSS 6.4 Frappe ERPNextFrappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods…
Page 2 of 2