frappe
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 185 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 4, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document
Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocation
Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount
Frappe HR Permission Validation __init__.py get_attendance_requests authorization
Frappe ERPNext before 16.34.1 Unauthorized Method Invocation
Frappe ERPNext before 15.121.0 and 16.34.0 Missing Authorization in Timesheet Endpoints
Frappe LMS: Path Traversal in SCORM File Serving
Frappe 15.11.0 through 16.32.0 Stored XSS via Workspace Link Description
Frappe: Access control bypass via REST API dot-notation fields on linked doctypes
Monitor frappe in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.