What’s Vulnerable › Products

frappe builder vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your frappe builder version is affected

Latest frappe builder vulnerabilities

• CVE-2026-115718 — Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt (CVSS 4.3)
• CVE-2026-115717 — Frappe Builder before 1.36.1 SSRF via convert_to_webp (CVSS 7.7)
• CVE-2026-115720 — Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect (CVSS 5.0)