https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T15:10:07.617567+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-55823 CVE-2026-55823 — Frappe: Possibility of SQL injection in reportview 2026-10-17T15:10:07.618762+00:00

Affected: frappe

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version 16.23.0.