Skip to content
OpenAdvisories

Product · Frappe Technologies

builder

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-115717

    Frappe Builder before 1.36.1 SSRF via convert_to_webp

    Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API endpoint, which lacks the has_page_write access control applied to similar asset-ingest handlers and performs an unprotected requests.get call…

    Frappe Technologies builder