<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: frappe-press</title><description>Every new CVE for frappe-press.</description><link>https://agentprime.io/</link><item><title>CVE-2026-41430: Press vulnerable to reflected XSS on login redirection</title><link>https://agentprime.io/advisories/CVE-2026-41430/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41430/</guid><description>CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Apr 2026 02:42:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41317: Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation</title><link>https://agentprime.io/advisories/CVE-2026-41317/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41317/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Apr 2026 02:40:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59421: Press vulnerable to email flooding to users due to lack of validation and rate limits</title><link>https://agentprime.io/advisories/CVE-2025-59421/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59421/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Sep 2025 14:42:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53545: Press has a potential 2FA bypass</title><link>https://agentprime.io/advisories/CVE-2025-53545/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53545/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Jul 2025 15:02:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-50356: Press has a potential 2FA bypass</title><link>https://agentprime.io/advisories/CVE-2024-50356/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-50356/</guid><description>CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 31 Oct 2024 18:02:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-49751: Frappe Press possible HTML injection through SaaS Signup inputs</title><link>https://agentprime.io/advisories/CVE-2024-49751/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49751/</guid><description>CVSS 1.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Oct 2024 15:45:12 GMT</pubDate><category>CVE</category></item></channel></rss>