Skip to content
COOEY

FAIL › dossier

frappe

VENDOR

Failure events
2
Zero-days
0
RCEs
0
On KEV
0
Critical
2
Worst shame
35
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 4
DATEEVENTSEVSUMMARY
2026-04-08 CVE-2026-31017 critical A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF. When generating PDFs from user-controlled HTML content
2026-04-08 CVE-2026-31017 critical A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized before being rendered into PDF. When generating PDFs from user-controlled HTML content
2026-04-07 CVE-2026-39351 critical CVE-2026-39351: Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0,
2026-04-07 CVE-2026-39351 critical CVE-2026-39351: Frappe is a full-stack web application framework. Prior to 16.14.0 and 15.104.0,