https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T03:46:15.843459+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-30212 CVE-2025-30212 — Frappe has possibility of SQL injection due to improper validations 2026-10-24T03:46:15.845163+00:00

Affected: frappe

Frappe is a full-stack web application framework. An SQL Injection vulnerability has been identified in Frappe Framework prior to versions 14.89.0 and 15.51.0 which could allow a malicious actor to access sensitive information. Versions 14.89.0 and 15.51.0 fix the issue. Upgrading is required; no other workaround is present.

 https://cve.radiocsirt.org/vuln/ghsa-3hj6-r5c9-q8f3 GHSA-3hj6-r5c9-q8f3 — Frappe has possibility of SQL injection due to improper validations 2026-10-24T03:46:15.845213+00:00

Affected: PyPI: frappe

### Impact An SQL Injection vulnerability has been identified in Frappe Framework which could allow a malicious actor to access sensitive information.

### Workarounds Upgrading is required, no other workaround is present.

### Credits

Thanks to Thanh of Calif.io for reporting the issue