← All credits

vnth4nhnt

16 vulnerability records and advisories credit this contributor.

CVE-2026-109667

Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation

CVE-2026-109652

Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

CVE-2026-109668

Frappe ERPNext before 15.110.0 Missing Authorization in Party Record Endpoints

CVE-2026-109648

Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation

CVE-2026-109643

Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Data

CVE-2026-109638

Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validation

CVE-2026-109669

Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modification

CVE-2026-109659

Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Data

CVE-2026-109639

Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests

CVE-2026-109665

Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivation