https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T06:42:53.131509+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-68929 CVE-2025-68929 — Frappe may be vulnerable remote code execution due to server-side template injection 2026-10-17T06:42:53.132952+00:00

Affected: frappe

Frappe is a full-stack web application framework. Prior to versions 14.99.6 and 15.88.1, an authenticated user with specific permissions could be tricked into accessing a specially crafted link. This could lead to a malicious template being executed on the server, resulting in remote code execution. Versions 14.99.6 and 15.88.1 fix the issue. No known workarounds are available.