FR
Product
frappe
105
CVEs
0
On KEV
9.8
Max CVSS
21
New 30D
Severity mix
Critical 9High 31Medium 62Low 3
Watch
Add frappe to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109603 | 3.3 | Oct 12 | Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit Affected: before 15.107.3; 16.0.0-beta.1 before 16.17.0 |
| CVE-2026-66000 | 2.3 | Aug 7 | Frappe: Unrestricted access to Document Follow APIs Affected: >= 16.0.0-beta.1, < 16.19.0; >= 15.0.0, < 15.109.0 |
| CVE-2026-47199 | 2.3 | Jul 10 | Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE Affected: < 15.108.0; >= 16.0.0-beta.1, < 16.18.3 |
Showing 3