← All credits

AarDG10

6 vulnerability records and advisories credit this contributor.

CVE-2026-124443

Frappe before 16.35.0 Broken Access Control in File List/Report Queries

CVE-2026-114664

Frappe before 16.33.0 Blind SQL Injection via get_events

CVE-2026-119144

Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields

CVE-2026-109600

Frappe before 16.31.0 Improper Access Control in Document Follow Notifications

CVE-2026-109602

Frappe before v16.31.0 Stored XSS via Dashboard Chart Filters

CVE-2026-109598

Frappe before 16.33.0 Broken Authorization via send_sms Endpoint