← All credits

diptanilsaha

56 vulnerability records and advisories credit this contributor.

CVE-2026-109648

Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation

CVE-2026-109653

Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeover

CVE-2026-109658

Frappe ERPNext before 15.115.0 Missing Authorization on Endpoints

CVE-2026-109668

Frappe ERPNext before 15.110.0 Missing Authorization in Party Record Endpoints

CVE-2026-109673

Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names

CVE-2026-109669

Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modification

CVE-2026-109659

Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Data

CVE-2026-109654

Frappe ERPNext before 15.119.0 Missing Authorization in Transactional Email Endpoints

CVE-2026-109649

Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests

CVE-2026-109644

Frappe ERPNext before 15.119.0 Unauthorized Access to Valuation Data