FR
Product
frappe
105
CVEs
0
On KEV
9.8
Max CVSS
21
New 30D
Severity mix
Critical 9High 31Medium 62Low 3
Watch
Add frappe to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-58391 | 4.3 | Oct 12 | Frappe before 15.4.0 XSS via Printview Parameters Affected: before 14.58.0; 15.0.0 before 15.4.0 |
| CVE-2023-54410 | 4.3 | Oct 12 | Frappe before 13.22.0 Improper Authorization via Document Rename Affected: before 13.22.0 |
| CVE-2026-109603 | 3.3 | Oct 12 | Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit Affected: before 15.107.3; 16.0.0-beta.1 before 16.17.0 |
| CVE-2026-66000 | 2.3 | Aug 7 | Frappe: Unrestricted access to Document Follow APIs Affected: >= 16.0.0-beta.1, < 16.19.0; >= 15.0.0, < 15.109.0 |
| CVE-2026-47199 | 2.3 | Jul 10 | Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE Affected: < 15.108.0; >= 16.0.0-beta.1, < 16.18.3 |