FH
Product
Frappe HR
by Frappe · last CVE Apr 21, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add Frappe HR to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41320
6.5
0%
Apr 21
Frappe HR has possibility of SQL Injection due to improper field sanitization
Affected: before 14.38.1; 15.0.0 before 15.54.0
CVE-2026-40889
6.5
0%
Apr 21
Frappe HR has Improper Access Control on Files
Affected: before 15.58.2; 16.0.0 before 16.4.2
CVE-2026-40888
6.5
0%
Apr 21
Frappe HR vulnerable to Improper Access Control
Affected: before 15.58.1; 16.0.0 before 16.4.1
Showing 3