PR
Product
press
by frappe · last CVE Apr 24, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add press to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41317
7.5
0%
Apr 24
Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation
Affected: < 52ea2f2d1b587be0807557e96f025f47897d00fd
Showing 1