Advisories · Technology
frappe builder.
Every CVE that names frappe builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect
- frappe builder
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Frappe Builder before 1.36.1 SSRF via convert_to_webp
- frappe builder
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt
- frappe builder
- Broken access control