agentprime: frappe-hrmsEvery new CVE for frappe-hrms.https://agentprime.io/CVE-2026-121442: Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances APIhttps://agentprime.io/advisories/CVE-2026-121442/https://agentprime.io/advisories/CVE-2026-121442/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:32 GMTCVECVE-2026-64862: Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMShttps://agentprime.io/advisories/CVE-2026-64862/https://agentprime.io/advisories/CVE-2026-64862/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 20:52:53 GMTCVECVE-2026-55796: Frappe HR: SQL Injection in HRMS Salary Payments via ECS Reporthttps://agentprime.io/advisories/CVE-2026-55796/https://agentprime.io/advisories/CVE-2026-55796/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 20:50:01 GMTCVECVE-2026-111389: Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validationhttps://agentprime.io/advisories/CVE-2026-111389/https://agentprime.io/advisories/CVE-2026-111389/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 01:17:57 GMTCVECVE-2026-108733: Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocationhttps://agentprime.io/advisories/CVE-2026-108733/https://agentprime.io/advisories/CVE-2026-108733/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:40 GMTCVECVE-2026-108732: Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amounthttps://agentprime.io/advisories/CVE-2026-108732/https://agentprime.io/advisories/CVE-2026-108732/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:39 GMTCVECVE-2026-54524: Frappe HR: SQL Injection in HRMS Salary Payments Based on Payment Mode Reporthttps://agentprime.io/advisories/CVE-2026-54524/https://agentprime.io/advisories/CVE-2026-54524/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 18:33:37 GMTCVECVE-2026-45081: Frappe HR: Permission Bypass in HRMS Leave Details APIhttps://agentprime.io/advisories/CVE-2026-45081/https://agentprime.io/advisories/CVE-2026-45081/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 17:18:53 GMTCVECVE-2026-41320: Frappe HR has possibility of SQL Injection due to improper field sanitizationhttps://agentprime.io/advisories/CVE-2026-41320/https://agentprime.io/advisories/CVE-2026-41320/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:34:16 GMTCVECVE-2026-40889: Frappe HR has Improper Access Control on Fileshttps://agentprime.io/advisories/CVE-2026-40889/https://agentprime.io/advisories/CVE-2026-40889/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:32:52 GMTCVECVE-2026-40888: Frappe HR vulnerable to Improper Access Controlhttps://agentprime.io/advisories/CVE-2026-40888/https://agentprime.io/advisories/CVE-2026-40888/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:28:28 GMTCVE