https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T19:48:51.036139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5455 EUVD-2026-5455 2026-10-12T19:48:51.038048+00:00 EUVD-2026-5455 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34074 fkie_cve-2024-34074 2026-10-12T19:48:51.038079+00:00

Frappe is a full-stack web application framework. Prior to 15.26.0 and 14.74.0, the login page accepts redirect argument and it allowed redirect to untrusted external URls. This behaviour can be used by malicious actors for phishing. This vulnerability is fixed in 15.26.0 and 14.74.0.