← All credits

diptanilsaha

56 vulnerability records and advisories credit this contributor.

CVE-2026-109617

Frappe ERPNext before 15.121.0 Missing Authorization in Record Creation Endpoints

CVE-2026-109625

Frappe ERPNext before 15.121.3 Missing Authorization Exposes Financial Data

CVE-2026-109630

Frappe ERPNext before 15.121.0 Missing Authorization in Endpoints

CVE-2026-109671

Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pages

CVE-2026-109666

Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpoints

CVE-2026-109661

Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Data

CVE-2026-109656

Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Access

CVE-2026-109651

Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Field

CVE-2026-109646

Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

CVE-2026-109641

Frappe ERPNext before 15.110.0 Missing Authorization in Record Creation Endpoints