← All credits

vnth4nhnt

16 vulnerability records and advisories credit this contributor.

CVE-2026-109655

Frappe ERPNext before 15.115.0 Missing Authorization in Inventory Endpoints

CVE-2026-109665

Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivation

CVE-2026-109635

Frappe ERPNext before 15.105.0 Missing Authorization in Document Creation Endpoints

CVE-2026-109656

Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Access

CVE-2026-109621

Frappe ERPNext before 15.120.0 Unauthorized Party Record Access via Permission Bypass

CVE-2026-109667

Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation

CVE-2026-109652

Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

CVE-2026-109638

Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validation

CVE-2026-109643

Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Data

CVE-2026-109648

Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation