Frappe ERPNext

2 known vulnerabilities in Frappe ERPNext, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-96672 CVSS 5.3 medium Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted…
  • CVE-2026-94113 CVSS 7.1 high Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet…