https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T04:02:15.583600+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-58375 CVE-2025-58375 — Frappe has potential SQL Injection due to missing validation 2026-10-23T04:02:15.584719+00:00

Affected: frappe

Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that is vulnerable to error-based SQL Injection through lack of validation. Sensitive information such as versioning can be retrieved. This issue is fixed in versions 14.96.10 and 15.72.0.