Where
-Infinity
0

Trending

Last week
Last month
Last year

Frappe Frappe FrameworkFrappe: check_safe_sql_query Permits SELECT INTO OUTFILE

Risk 15
Severity
2.3
First published (updated )
CVE-2026-47199

Frappe Frappe FrameworkFrappe: Unauthenticated User Enumeration via reset_password

Risk 33
Severity
6.9
First published (updated )
CVE-2026-58503

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering

Risk 34
Severity
4.8
First published (updated )
CVE-2026-50712

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50711

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50710
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering

Risk 34
Severity
4.8
First published (updated )
CVE-2026-50709

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering

Risk 34
Severity
4.8
First published (updated )
CVE-2026-50708

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50705

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50704

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Desktop Icon label rendering

Risk 34
Severity
4.8
First published (updated )
CVE-2026-50703
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Reflected DOM XSS in dashboard-view breadcrumb rendering

Risk 37
Severity
5.1
First published (updated )
CVE-2026-50701

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in frappe.get_avatar image rendering

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50700

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Auto Repeat dashboard schedule rendering

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50699

Frappe Frappe FrameworkFrappe Framework 17.0.0-dev - Stored XSS in Audit Trail template rendering

Risk 30
Severity
4.6
First published (updated )
CVE-2026-50698

Frappe Frappe FrameworkFrappe: Broken Access Control on Private Files

Risk 26
Severity
5.3
First published (updated )
CVE-2026-47182
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frappe Frappe FrameworkFrappe Framework 16.10.0 - Stored DOM XSS in Multiple Field Formatters

Risk 34
Severity
4.6
First published (updated )
CVE-2026-3837

Frappe Frappe FrameworkFrappe Framework 16.10.0 - Stored DOM XSS in Tag Pill Renderer

Risk 34
Severity
4.6
First published (updated )
CVE-2026-3673

Frappe ERPNextSSRF

Risk 66
Severity
9.1
First published (updated )
CVE-2026-31017

Frappe Frappe FrameworkXSS, Malicious File Upload

Risk 80
Severity
9.6
First published (updated )
CVE-2025-67289

ERPNext ERPNextXSS

Risk 74
Severity
9
First published (updated )
CVE-2025-65267
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203