Skip to content
OpenAdvisories

Package · PyPI

frappe

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2025-30214

    Frappe vulnerable to information disclosure leading to account takeover

    Frappe is a full-stack web application framework. Prior to versions 14.89.0 and 15.51.0, making crafted requests could lead to information disclosure that could further lead to account takeover. Versions 14.89.0 and 15.51.0 fix the issue. There's no workaroun…

    Frappe Technologies frappe frappe PyPI