CVE-2026-31878
Frappe is a full-stack web application framework. Prior to 14.100.1, 15.100.0, and 16.6.0, a malicious user could send a crafted request to an endpoint which would lead to the server making an HTTP call to a service of the user's choice. This vulnerability is fixed in 14.100.1, 15.100.0, and 16.6.0.
Vendor
Product
CWE
Yayın Tarihi
2026-03-11 19:16:04
Güncelleme
2026-03-13 17:49:29
Source Identifier
security-advisories@github.com
KEV Date Added
-