Frappe Framework
12 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Frappe Framework, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
Frappe Framework CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 12 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Latest CVEs
The 12 most recently published vulnerabilities affecting Frappe Framework.
- CVE-2026-50712Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering—
- CVE-2026-50711Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering—
- CVE-2026-50710Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config—
- CVE-2026-50709Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering—
- CVE-2026-50708Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering—
- CVE-2026-50705Frappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering—
- CVE-2026-50704Frappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering—
- CVE-2026-50703Frappe Framework 17.0.0-dev - Stored XSS in Desktop Icon label rendering—
- CVE-2026-50701Frappe Framework 17.0.0-dev - Reflected DOM XSS in dashboard-view breadcrumb rendering—
- CVE-2026-50700Frappe Framework 17.0.0-dev - Stored XSS in frappe.get_avatar image rendering—
- CVE-2026-50699Frappe Framework 17.0.0-dev - Stored XSS in Auto Repeat dashboard schedule rendering—
- CVE-2026-50698Frappe Framework 17.0.0-dev - Stored XSS in Audit Trail template rendering—
Product grouping is registry-driven, with AI assist and human review. How it works