MEDIUMPyPI
GHSA-3hj6-r5c9-q8f3· CVE-2025-30212, PYSEC-2026-1390Frappe has possibility of SQL injection due to improper validations
Modified: 7/7/2026
package
PyPI/frappe
pkg:pypi/frappe
MEDIUMPyPI
GHSA-6phg-4wmq-h5h3· CVE-2025-30217, PYSEC-2026-1391Frappe has possibility of SQL injection due to improper validations
Modified: 7/7/2026
HIGHPyPI
GHSA-qrv3-jc3h-f3m6· CVE-2025-30214, PYSEC-2026-1392Frappe vulnerable to information disclosure leading to account takeover
Modified: 7/7/2026
MEDIUMPyPI
GHSA-v342-4xr9-x3q3· CVE-2025-30213, PYSEC-2026-1393Frappe has Possibility of Remote Code Execution due to improper validation
Modified: 7/7/2026
—PyPI
PYSEC-2026-1390· CVE-2025-30212, GHSA-3hj6-r5c9-q8f3Frappe has possibility of SQL injection due to improper validations
Modified: 7/7/2026
—PyPI
PYSEC-2026-1391· CVE-2025-30217, GHSA-6phg-4wmq-h5h3Frappe has possibility of SQL injection due to improper validations
Modified: 7/7/2026
—PyPI
PYSEC-2026-1392· CVE-2025-30214, GHSA-qrv3-jc3h-f3m6Frappe vulnerable to information disclosure leading to account takeover
Modified: 7/7/2026
—PyPI
PYSEC-2026-1393· CVE-2025-30213, GHSA-v342-4xr9-x3q3Frappe has Possibility of Remote Code Execution due to improper validation
Modified: 7/7/2026