frappe press vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20252
3. 20262

Newest CVEs

• CVE-2026-41430

  Press vulnerable to reflected XSS on login redirection

  frappe · press

  Low1.3
• CVE-2026-41317

  Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation

  frappe · press

  Medium6.6
• CVE-2025-59421

  Press vulnerable to email flooding to users due to lack of validation and rate limits

  frappe · press

  Low2.7
• CVE-2025-53545

  Press has a potential 2FA bypass

  frappe · press

  Medium6.9
• CVE-2024-50356

  Press has a potential 2FA bypass

  frappe · press

  None0.0
• CVE-2024-49751

  Frappe Press possible HTML injection through SaaS Signup inputs

  frappe · press

  Low1.2