Skip to content
OpenAdvisories

Vendor

Frappe Technologies

268 known vulnerabilities.

Products

erpnext 99 frappe 95 lms 28 Frappe Framework 12 hrms 11 crm 6 press 6 builder 3 Frappe HelpDesk 1 frappe/lms 1 Frappe Framework (ERPNext) 1 Frappe CRM 1 Frappe Technologies 1 suite 1 helpdesk 1 HR 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-111389 Public exploit

    Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation

    Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authenticated attacker, including a low-privilege account, can send specially crafte…

    Frappe Technologies hrms