Skip to content
OpenAdvisories

Product · Frappe Technologies

HR

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-101006

    Frappe HR Permission Validation __init__.py get_attendance_requests authorization

    A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the file hrms/api/__init__.py of the component Permission Validation. This manipulation of the argument …

    Frappe Technologies HR