HR
Product
hrms
by frappe · last CVE Oct 16, 2026
10
CVEs
0
On KEV
7.7
Max CVSS
5
New 30D
Severity mix
Critical 0High 2Medium 8Low 0
Watch

Add hrms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111389
7.7
0%
Oct 16
Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation
Affected: 14.0.0 before 14.38.2; 15.0.0 before 15.64.0; 16.0.0 before 16.18.0
CVE-2026-54524
7.1
0%
Sep 17
Frappe HR: SQL Injection in HRMS Salary Payments Based on Payment Mode Report
Affected: < 16.7.0
Showing 2