Frappe Framework
Approved changes feed: RSS · Atom
cpe:2.3:a:frappe:frappe_framework:17.0.0-dev:*:windows:*:*:*:*:*
part: a version: 17.0.0-dev update: *
| Vendor | Frappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba) |
|---|---|
| Product | Frappe Framework (ef734a5e-2d74-5235-b6e0-7046a79b7ae8) |
| Edition | windows |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-50712 |
vulnerable | 2026-07-29 00:57:48.816557 |
Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.ui.Tree component
Published: 2026-06-24T15:26:54.413Z
Updated: 2026-06-24T15:38:21.291Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50711 |
vulnerable | 2026-07-29 00:57:48.816189 |
Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Number Card component.
Published: 2026-06-24T15:18:43.359Z
Updated: 2026-06-24T15:42:49.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50710 |
vulnerable | 2026-07-29 00:57:48.815608 |
Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation of user-controlled data in the Number Card component.
Published: 2026-06-24T15:08:41.416Z
Updated: 2026-06-24T15:44:26.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50709 |
vulnerable | 2026-07-29 00:57:48.815424 |
Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Notifications > Events panel.
Published: 2026-06-24T15:04:39.793Z
Updated: 2026-06-24T15:44:59.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50708 |
vulnerable | 2026-07-29 00:57:48.815071 |
Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the MultiSelectDialog component.
Published: 2026-06-24T14:58:51.624Z
Updated: 2026-06-24T15:47:02.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50705 |
vulnerable | 2026-07-29 00:57:48.814509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50704 |
vulnerable | 2026-07-29 00:57:48.814123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50703 |
vulnerable | 2026-07-29 00:57:48.813719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50701 |
vulnerable | 2026-07-29 00:57:48.813334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50700 |
vulnerable | 2026-07-29 00:57:48.812894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50699 |
vulnerable | 2026-07-29 00:57:48.812415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50698 |
vulnerable | 2026-07-29 00:57:48.809669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.