← All credits
ankush
7 vulnerability records and advisories credit this contributor.
CVE-2026-109601
Frappe Framework before v16.30.0 Arbitrary File Read via Outgoing Email HTML
CVE-2026-119144
Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields
CVE-2023-54407
Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks
CVE-2026-109663
Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parameters
CVE-2026-109603
Frappe Framework before 16.17.0 Authenticated SSRF and LFI via pdfkit
CVE-2024-58391
Frappe before 15.4.0 XSS via Printview Parameters
CVE-2023-54409
Frappe before 13.46.1 XSS via html2text Weak Sanitization