Skip to content
OpenAdvisories

Package · PyPI

frappe

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.6
    CVE-2025-30217

    Frappe has possibility of SQL injection due to improper validations

    Frappe is a full-stack web application framework. Prior to versions 14.93.2 and 15.55.0, a SQL Injection vulnerability has been identified in Frappe Framework which could allow a malicious actor to access sensitive information. Versions 14.93.2 and 15.55.0 co…

    Frappe Technologies frappe frappe PyPI
  • Medium 6.3
    CVE-2025-30213

    Frappe has Possibility of Remote Code Execution due to improper validation

    Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnera…

    Frappe Technologies frappe frappe PyPI
  • Medium 6.6
    CVE-2025-30212

    Frappe has possibility of SQL injection due to improper validations

    Frappe is a full-stack web application framework. An SQL Injection vulnerability has been identified in Frappe Framework prior to versions 14.89.0 and 15.51.0 which could allow a malicious actor to access sensitive information. Versions 14.89.0 and 15.51.0 fi…

    Frappe Technologies frappe frappe PyPI