Frappe vulnerabilities
CVEs whose affected-version data names the Frappe package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
34 CVEsRSS
CVE-2025-30217MediumFrappe has possibility of SQL injection due to improper validations
Frappe has possibility of SQL injection due to improper validations
▾ Sunlitfrappe · frappeEPSS 0.37%via OSV
CVE-2025-30213MediumFrappe has Possibility of Remote Code Execution due to improper validation
Frappe has Possibility of Remote Code Execution due to improper validation
▾ Sunlitfrappe · frappeEPSS 0.72%via OSV
CVE-2025-30214HighFrappe vulnerable to information disclosure leading to account takeover
Frappe vulnerable to information disclosure leading to account takeover
▾ Twilightfrappe · frappeEPSS 0.41%via OSV
CVE-2025-30212MediumFrappe has possibility of SQL injection due to improper validations
Frappe has possibility of SQL injection due to improper validations
▾ Sunlitfrappe · frappeEPSS 0.44%via OSV