https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T19:50:00.257560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224939 EUVD-2026-224939 2026-10-16T19:50:00.359795+00:00 EUVD-2026-224939 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30214 fkie_cve-2025-30214 2026-10-16T19:50:00.359832+00:00

Frappe is a full-stack web application framework. Prior to versions 14.89.0 and 15.51.0, making crafted requests could lead to information disclosure that could further lead to account takeover. Versions 14.89.0 and 15.51.0 fix the issue. There's no workaround to fix this without upgrading.

 https://cve.radiocsirt.org/vuln/ghsa-qrv3-jc3h-f3m6 GHSA-qrv3-jc3h-f3m6 — Frappe vulnerable to information disclosure leading to account takeover 2026-10-16T19:50:00.359865+00:00

Affected: PyPI: frappe

### Impact Making crafted requests could lead to information disclosure that could further lead to account takeover.

### Workarounds There's no workaround to fix this without upgrading.

### Credits Thanks to Thanh of Calif.io for reporting the issue

 https://cve.radiocsirt.org/vuln/pysec-2026-1392 PYSEC-2026-1392 — Frappe vulnerable to information disclosure leading to account takeover 2026-10-16T19:50:00.359894+00:00

Affected: PyPI: frappe

### Impact Making crafted requests could lead to information disclosure that could further lead to account takeover.

### Workarounds There's no workaround to fix this without upgrading.

### Credits Thanks to Thanh of Calif.io for reporting the issue