Skip to content
OpenAdvisories

Vendor

Monogramm

1 known vulnerabilities.

Products

erpnext_ocr 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119758

    ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document

    ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows any authenticated user to read arbitrary server files by passing a fully client-controlled path argument to the whitelisted read_doc…

    Monogramm erpnext_ocr