3 CVEs
CRITICAL
CVSS 9.8
Frappe Framework Multiple Flaws
2026-03-11
CVE-2026-31877
CRITICAL
SQL injection in Frappe framework before 15.84.0/14.99.0.
9.8
CVSS
0.0%
EPSS
CVE-2026-31879
MEDIUM
Frappe is a full-stack web application framework. versions up to 14.100.2 is affected by cross-site scripting (xss).
5.4
CVSS
0.0%
EPSS
CVE-2026-31878
MEDIUM
Frappe is a full-stack web application framework. versions up to 14.100.1 is affected by server-side request forgery (ssrf) (CVSS 5.0).
5.0
CVSS
0.0%
EPSS