Known Vulnerabilities for products from Frappe
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Frappe".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121442 json | Not Provided | 2026-11-03 | 2026-11-03 | |
| CVE-2026-119145 json | Not Provided | 2026-10-29 | 2026-10-29 | |
| CVE-2026-116492 json | Not Provided | 2026-10-26 | 2026-11-02 | |
| CVE-2026-115720 json | Not Provided | 2026-10-26 | 2026-10-26 | |
| CVE-2026-115718 json | Not Provided | 2026-10-26 | 2026-10-26 | |
| CVE-2026-115717 json | Not Provided | 2026-10-26 | 2026-11-02 | |
| CVE-2026-114664 json | Not Provided | 2026-10-22 | 2026-10-22 | |
| CVE-2026-111939 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-111938 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-111937 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-81731 json | Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description field... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-46546 json | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.53.... | Not Provided | 2026-06-10 | 2026-07-23 |
| CVE-2026-44448 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed ... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-44447 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.0, some endpoints were vulnerable to SQL i... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-44446 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.104.3 and 16.14.0, some endpoints were vulne... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-44445 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.104.3 and 16.12.0, an improper restriction o... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-44442 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.1, certain endpoints failed to enforce pro... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-44441 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.106.0 and 16.16.0, a malicious user could se... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-44440 json | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of... | Not Provided | 2026-05-13 | 2026-10-26 |
| CVE-2026-41430 json | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-servi... | Not Provided | 2026-04-24 | 2026-10-26 |