← All credits

diptanilsaha

51 vulnerability records and advisories credit this contributor.

CVE-2026-109611

Frappe ERPNext before 15.121.0 Missing Authorization in Certain Endpoints

CVE-2026-109671

Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pages

CVE-2026-109670

Frappe ERPNext before 15.110.0 Stored XSS via Item Record Name

CVE-2026-109666

Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpoints

CVE-2026-109665

Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivation

CVE-2026-109661

Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Data

CVE-2026-109656

Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Access

CVE-2026-109651

Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Field

CVE-2026-109646

Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

CVE-2026-109645

Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Authorization