← frappe

frappe / erpnext

3 known vulnerabilities in frappe erpnext.

CVEPriorityEPSSCVSSKEVWhat
CVE-2026-38431 High 0.4% 9.8 ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SS…
CVE-2026-31017 Medium 0.2% 9.1 A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format fu…
CVE-2026-38432 Low 0.2% 6.1 ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the …