← All credits

diptanilsaha

51 vulnerability records and advisories credit this contributor.

CVE-2026-109641

Frappe ERPNext before 15.110.0 Missing Authorization in Record Creation Endpoints

CVE-2026-109636

Frappe ERPNext before 15.115.0 Missing Authorization Exposes Financial Data

CVE-2026-109631

Frappe ERPNext before 15.119.1 SQL Injection via Missing Validation

CVE-2026-109630

Frappe ERPNext before 15.121.0 Missing Authorization in Endpoints

CVE-2026-109626

Frappe ERPNext before 16.34.2 SQL Injection via Multiple Endpoints

CVE-2026-109625

Frappe ERPNext before 15.121.3 Missing Authorization Exposes Financial Data

CVE-2026-109617

Frappe ERPNext before 15.121.0 Missing Authorization in Record Creation Endpoints

CVE-2026-109613

Frappe ERPNext before 15.121.0 Missing Authorization Allows Unauthorized Status Modification

CVE-2026-109612

Frappe ERPNext before 15.120.0 Stored XSS via Report View

CVE-2026-109608

Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoint Input