What’s Vulnerable › Products

Frappe Framework vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Frappe Framework version is affected

Latest Frappe Framework vulnerabilities

• CVE-2026-50712 — Frappe Framework 17.0.0-dev - Stored XSS in Tree View node label rendering (CVSS 4.8)
• CVE-2026-50711 — Frappe Framework 17.0.0-dev - Stored XSS in Number Card filter fields rendering (CVSS 4.6)
• CVE-2026-50710 — Frappe Framework 17.0.0-dev - Stored XSS via eval in Number Card filters_config (CVSS 4.6)
• CVE-2026-50709 — Frappe Framework 17.0.0-dev - Stored XSS in Notifications Events color rendering (CVSS 4.8)
• CVE-2026-50708 — Frappe Framework 17.0.0-dev - Stored XSS in Multi Select Dialog result rendering (CVSS 4.8)
• CVE-2026-50705 — Frappe Framework 17.0.0-dev - Stored XSS in Form Dashboard headline rendering (CVSS 4.6)
• CVE-2026-50704 — Frappe Framework 17.0.0-dev - Reflected/Stored XSS in File View breadcrumbs rendering (CVSS 4.6)
• CVE-2026-50703 — Frappe Framework 17.0.0-dev - Stored XSS in Desktop Icon label rendering (CVSS 4.8)
• CVE-2026-50701 — Frappe Framework 17.0.0-dev - Reflected DOM XSS in dashboard-view breadcrumb rendering (CVSS 5.1)
• CVE-2026-50700 — Frappe Framework 17.0.0-dev - Stored XSS in frappe.get_avatar image rendering (CVSS 4.6)
• CVE-2026-50699 — Frappe Framework 17.0.0-dev - Stored XSS in Auto Repeat dashboard schedule rendering (CVSS 4.6)
• CVE-2026-50698 — Frappe Framework 17.0.0-dev - Stored XSS in Audit Trail template rendering (CVSS 4.6)