← All credits

diptanilsaha

56 vulnerability records and advisories credit this contributor.

CVE-2026-124315

Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items

CVE-2026-124316

Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests

CVE-2026-124314

Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activities

CVE-2026-124313

Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_doc

CVE-2026-119145

Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload

CVE-2026-109645

Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Authorization

CVE-2026-109665

Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivation

CVE-2026-109670

Frappe ERPNext before 15.110.0 Stored XSS via Item Record Name

CVE-2026-109599

Frappe before 15.113.3 Missing Authorization Allows Unauthorized Record Modification

CVE-2026-109612

Frappe ERPNext before 15.120.0 Stored XSS via Report View