Approved changes feed: RSS · Atom

cpe:2.3:a:frappe:frappe_framework:17.0.0-dev:*:linux:*:*:*:*:*

part: a version: 17.0.0-dev update: *

VendorFrappe (a51f8b94-1fb6-5e30-97d7-fbeb544c71ba)
ProductFrappe Framework (ef734a5e-2d74-5235-b6e0-7046a79b7ae8)
Editionlinux
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-50712 vulnerable 2026-07-29 00:57:48.816633 Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.ui.Tree component
Published: 2026-06-24T15:26:54.413Z
Updated: 2026-06-24T15:38:21.291Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50711 vulnerable 2026-07-29 00:57:48.816311 Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Number Card component.
Published: 2026-06-24T15:18:43.359Z
Updated: 2026-06-24T15:42:49.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50710 vulnerable 2026-07-29 00:57:48.815872 Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation of user-controlled data in the Number Card component.
Published: 2026-06-24T15:08:41.416Z
Updated: 2026-06-24T15:44:26.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50709 vulnerable 2026-07-29 00:57:48.815464 Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Notifications > Events panel.
Published: 2026-06-24T15:04:39.793Z
Updated: 2026-06-24T15:44:59.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50708 vulnerable 2026-07-29 00:57:48.815276 Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the MultiSelectDialog component.
Published: 2026-06-24T14:58:51.624Z
Updated: 2026-06-24T15:47:02.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50705 vulnerable 2026-07-29 00:57:48.814753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50704 vulnerable 2026-07-29 00:57:48.814260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50703 vulnerable 2026-07-29 00:57:48.813866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50701 vulnerable 2026-07-29 00:57:48.813482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50700 vulnerable 2026-07-29 00:57:48.812920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50699 vulnerable 2026-07-29 00:57:48.812575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-50698 vulnerable 2026-07-29 00:57:48.810979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.