frappe

Records322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical20CVSS 9.0–10.0

CVSS high119CVSS 7.0–8.9

Exploited now

frappe records in CISA KEV

No frappe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Erpnext 59 records HIGH Frappe 49 records HIGH Learning 22 records MEDIUM Frappe Hr 3 records LOW Frappe Crm 2 records HIGH Press 2 records LOW Helpdesk 1 record HIGH

Records

2 records in Press · all components

TI-2026-29918 CVE-2026-41317

Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation

LOW 34

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).`press.api.account.create_api_secret` is prone to CSRF-like exploits.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00165 Published 2026-04-24 Fixed in 52ea2f2 CWE-352

TI-2026-30029 CVE-2026-41430

Press vulnerable to reflected XSS on login redirection

LOW 7

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).

CVSS 4.0LOW 1.3 Network No auth User interaction EPSS 0.00155 Published 2026-04-24 Fixed in 16d1b6c CWE-79

Open these records in search →

Critical	20
High	119
Medium	164
Low	18
No CVSS	1