← All credits

diptanilsaha

51 vulnerability records and advisories credit this contributor.

CVE-2026-109614

Frappe ERPNext before 16.34.0 Missing Authorization Exposes Financial Data

CVE-2026-109662

Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Form

CVE-2026-109652

Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

CVE-2026-109647

Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

CVE-2026-109642

Frappe ERPNext before 15.110.0 Missing Authorization in Certain Endpoints

CVE-2026-109632

Frappe ERPNext before 15.121.0 Missing Authorization on Certain Endpoints

CVE-2026-109627

Frappe ERPNext before 15.120.0 Missing Authorization Exposes Financial Data

CVE-2026-109622

Frappe ERPNext before 15.121.0 Unauthorized Document Modification via Missing Authorization

CVE-2026-109609

Frappe ERPNext before 15.119.1 SQL Injection via Missing Input Validation

CVE-2026-109673

Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names