Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:38:09 +0000 CVE-2026-41320 — Frappe HR has possibility of SQL Injection due to improper field sanitization https://cve.radiocsirt.org/vuln/cve-2026-41320 <p><strong>Affected:</strong> frappe hrms</p> <p>Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.54.0 and 14.38.1, a specially crafted request made to a certain endpoint could result in SQL injection, allowing an attacker to extract information they wouldn&#39;t otherwise be able to. Versions 15.54.0 and 14.38.1 contain a patch. No known workarounds are available.</p> <p><strong>Affected:</strong> frappe hrms</p> <p>Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.54.0 and 14.38.1, a specially crafted request made to a certain endpoint could result in SQL injection, allowing an attacker to extract information they wouldn&#39;t otherwise be able to. Versions 15.54.0 and 14.38.1 contain a patch. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/cve-2026-41320