Approved changes feed: RSS · Atom
cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Frappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba) |
|---|---|
| Product | Frappe (8a44176d-533c-53c6-aaf4-17dd3ac01c2a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/frappe/frappe |
purl2cpe | 2026-06-01 10:17:00.331456 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58503 |
vulnerable | 2026-07-29 01:03:16.879041 |
Frappe: Unauthenticated User Enumeration via reset_password
Frappe is a full-stack web application framework. Prior to 16.16.0 and 15.106.0, user enumeration could be performed via the reset_password endpoint. This issue is fixed in versions 16.16.0 and 15.106.0.
Published: 2026-07-10T21:12:28.742Z
Updated: 2026-07-13T18:55:05.081Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55852 |
vulnerable | 2026-07-29 01:00:28.656196 |
Frappe: TarSlip RCE in Package Import
Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, TarSlip RCE was possible in Package Import because tarfile members were not sufficiently checked before extraction. This issue is fixed in versions 16.23.0 and 15.112.0.
Published: 2026-07-10T21:28:29.445Z
Updated: 2026-07-13T14:11:14.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-53568 |
vulnerable | 2026-07-29 01:00:27.086836 |
Frappe: Stored XSS in Frappe Report/List View via 'set_link_title_field_value'
Frappe is a full-stack web application framework. Prior to versions 15.107.2 and 16.17.4, there is a stored XSS vulnerablity in Frappe Report/List View. This issue has been patched in versions 15.107.2 and 16.17.4.
Published: 2026-06-12T14:45:11.531Z
Updated: 2026-06-12T16:08:22.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50026 |
vulnerable | 2026-07-29 00:57:47.485711 |
Frappe: Lack of permissions checks in 'relink' and 'set_email_password' endpoints
Frappe is a full-stack web application framework. Prior to versions 15.107.0 and 16.17.0, a lack of permission checks in these endpoints allowed unauthorized access to resources. This issue has been patched in versions 15.107.0 and 16.17.0.
Published: 2026-06-12T14:43:41.190Z
Updated: 2026-06-12T16:07:17.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49394 |
vulnerable | 2026-07-29 00:57:45.413913 |
Frappe: Auth. bypass via update_page
Frappe is a full-stack web application framework. Prior to 16.19.0, authorization bypass was possible via the update_page endpoint in Workspace because public workspaces did not receive the required Workspace Manager edit check. This issue is fixed in version 16.19.0.
Published: 2026-07-10T21:24:47.624Z
Updated: 2026-07-13T16:17:40.190Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48127 |
vulnerable | 2026-07-29 00:55:01.092127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47739 |
vulnerable | 2026-07-29 00:55:00.379435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47422 |
vulnerable | 2026-07-29 00:55:00.232110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47199 |
vulnerable | 2026-07-29 00:54:59.907090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47182 |
vulnerable | 2026-07-29 00:54:59.895524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44976 |
vulnerable | 2026-07-29 00:52:14.961898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44975 |
vulnerable | 2026-07-29 00:52:14.961613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44208 |
vulnerable | 2026-07-29 00:52:14.106464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44207 |
vulnerable | 2026-07-29 00:52:14.106263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44206 |
vulnerable | 2026-07-29 00:52:14.106116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44205 |
vulnerable | 2026-07-29 00:52:14.105810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42219 |
vulnerable | 2026-07-29 00:49:31.768066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41581 |
vulnerable | 2026-07-29 00:49:31.368962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41482 |
vulnerable | 2026-07-29 00:49:31.298312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3837 |
vulnerable | 2026-06-08 08:01:19.535792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3673 |
vulnerable | 2026-06-08 08:01:19.154637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-39352 |
vulnerable | 2026-06-08 08:01:16.226618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-39351 |
vulnerable | 2026-06-08 08:01:16.226217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35614 |
vulnerable | 2026-06-08 07:59:14.188566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31879 |
vulnerable | 2026-06-08 07:57:16.040797 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31878 |
vulnerable | 2026-06-08 07:57:16.040389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31877 |
vulnerable | 2026-06-08 07:57:16.040060 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29081 |
vulnerable | 2026-06-08 07:55:16.092574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29077 |
vulnerable | 2026-06-08 07:55:16.087618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28436 |
vulnerable | 2026-06-08 07:55:15.307883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25956 |
vulnerable | 2026-06-08 07:53:20.639540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68953 |
vulnerable | 2026-06-08 07:41:21.974811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68929 |
vulnerable | 2026-06-08 07:41:21.947802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66206 |
vulnerable | 2026-06-08 07:39:21.491472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66205 |
vulnerable | 2026-06-08 07:39:21.491034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62407 |
vulnerable | 2026-06-08 07:37:29.634787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55732 |
vulnerable | 2026-06-08 07:33:15.317375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55731 |
vulnerable | 2026-06-08 07:33:15.316989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52898 |
vulnerable | 2026-06-08 07:31:13.155414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52896 |
vulnerable | 2026-06-08 07:31:13.151362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52895 |
vulnerable | 2026-06-08 07:31:13.150943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52048 |
vulnerable | 2026-06-08 07:31:11.352024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30217 |
vulnerable | 2026-06-08 07:16:59.305075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30214 |
vulnerable | 2026-06-08 07:16:59.301689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30213 |
vulnerable | 2026-06-08 07:16:59.301323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30212 |
vulnerable | 2026-06-08 07:16:59.300815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34074 |
vulnerable | 2026-06-08 06:37:32.620313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27105 |
vulnerable | 2026-06-08 06:31:27.567616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24813 |
vulnerable | 2026-06-08 06:29:41.819106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24812 |
vulnerable | 2026-06-08 06:29:41.818700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46127 |
vulnerable | 2026-06-08 06:12:43.894569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41328 |
vulnerable | 2026-06-08 06:11:05.941434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3988 |
vulnerable | 2026-06-08 05:48:22.774436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23058 |
vulnerable | 2026-06-08 05:40:56.118245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23057 |
vulnerable | 2026-06-08 05:40:56.117699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23055 |
vulnerable | 2026-06-08 05:40:56.090554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35175 |
vulnerable | 2026-06-08 05:25:00.888118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27508 |
vulnerable | 2026-06-08 05:23:52.746762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15700 |
vulnerable | 2026-06-08 05:12:57.821609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14967 |
vulnerable | 2026-06-08 05:12:56.474250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14966 |
vulnerable | 2026-06-08 05:12:56.473927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14965 |
vulnerable | 2026-06-08 05:12:56.473458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000120 |
vulnerable | 2026-06-08 05:08:34.084853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.