← All credits

diptanilsaha

56 vulnerability records and advisories credit this contributor.

CVE-2026-109636

Frappe ERPNext before 15.115.0 Missing Authorization Exposes Financial Data

CVE-2026-109631

Frappe ERPNext before 15.119.1 SQL Injection via Missing Validation

CVE-2026-109626

Frappe ERPNext before 16.34.2 SQL Injection via Multiple Endpoints

CVE-2026-109613

Frappe ERPNext before 15.121.0 Missing Authorization Allows Unauthorized Status Modification

CVE-2026-109608

Frappe ERPNext before 15.121.0 SQL Injection via Unvalidated Endpoint Input

CVE-2026-109614

Frappe ERPNext before 16.34.0 Missing Authorization Exposes Financial Data

CVE-2026-109662

Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Form

CVE-2026-109652

Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

CVE-2026-109647

Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

CVE-2026-109642

Frappe ERPNext before 15.110.0 Missing Authorization in Certain Endpoints