{"api_version":"v1","generated_at":"2026-10-09T16:20:00+00:00","product":{"cve_count":19,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-frappe-erpnext-0cd087387218","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/erpnext","name":"ERPNext","next_cursor":null,"observations":[{"affected":"ERPNext: 16.0.0 < 16.34.1","affected_versions_present":true,"cve_id":"CVE-2026-96672","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-96672","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-29T01:59:12.888Z","patch_url":"","primary_source":"","published":"2026-09-23T15:35:09.702Z"},{"affected":"ERPNext: < 15.121.0, 16.0.0 < 16.34.0","affected_versions_present":true,"cve_id":"CVE-2026-94113","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-94113","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-21T16:44:12.210Z","patch_url":"","primary_source":"","published":"2026-09-20T11:56:08.372Z"},{"affected":"< 15.116.0; >= 16.0.0, < 16.23.0","affected_versions_present":true,"cve_id":"CVE-2026-65822","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-65822","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-18T13:01:42.822Z","patch_url":"","primary_source":"","published":"2026-08-17T20:45:45.647Z"},{"affected":"< 15.111.0; >= 16.0.0, < 16.22.0","affected_versions_present":true,"cve_id":"CVE-2026-65974","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-65974","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-18T14:17:47.852Z","patch_url":"","primary_source":"","published":"2026-08-17T20:44:20.818Z"},{"affected":"< 15.118.0; >= 16.0.0, < 16.29.0","affected_versions_present":true,"cve_id":"CVE-2026-72911","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72911","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-13T15:51:32.962Z","patch_url":"","primary_source":"","published":"2026-08-10T21:00:46.536Z"},{"affected":"< 15.112.0; >= 16.0.0, < 16.22.0","affected_versions_present":true,"cve_id":"CVE-2026-72910","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72910","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T17:11:40.797Z","patch_url":"","primary_source":"","published":"2026-08-10T20:57:40.920Z"},{"affected":"< 15.112.0; >= 16.0.0, < 16.23.0","affected_versions_present":true,"cve_id":"CVE-2026-72909","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72909","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T13:27:35.018Z","patch_url":"","primary_source":"","published":"2026-08-10T20:55:06.168Z"},{"affected":"< 15.109.0; >= 16.0.0, < 16.20.0","affected_versions_present":true,"cve_id":"CVE-2026-72908","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72908","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-12T22:14:31.632Z","patch_url":"","primary_source":"","published":"2026-08-10T20:51:23.696Z"},{"affected":"< 15.111.0; >= 16.0.0, < 16.22.0","affected_versions_present":true,"cve_id":"CVE-2026-72907","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72907","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-13T15:50:03.387Z","patch_url":"","primary_source":"","published":"2026-08-10T20:49:26.987Z"},{"affected":"< 15.111.0; >= 16.0.0, < 16.22.0","affected_versions_present":true,"cve_id":"CVE-2026-72906","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72906","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-11T17:12:58.748Z","patch_url":"","primary_source":"","published":"2026-08-10T20:47:39.959Z"},{"affected":"< 15.115.0; < 16.26.0","affected_versions_present":true,"cve_id":"CVE-2026-13227","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-13227","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-05T14:44:49.081Z","patch_url":"","primary_source":"","published":"2026-08-04T20:53:53.785Z"},{"affected":"< 15.111.0; < 16.22.0","affected_versions_present":true,"cve_id":"CVE-2026-12895","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-12895","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-29T12:07:55.509Z","patch_url":"","primary_source":"","published":"2026-07-29T10:58:50.322Z"},{"affected":"< 15.111.0; >= 16.0.0, < 16.22.0","affected_versions_present":true,"cve_id":"CVE-2026-55242","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55242","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T16:02:44.516Z","patch_url":"","primary_source":"","published":"2026-07-15T15:38:31.577Z"},{"affected":"16.16.0","affected_versions_present":true,"cve_id":"CVE-2026-42839","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42839","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-03T19:09:12.657Z","patch_url":"","primary_source":"","published":"2026-06-03T17:44:41.303Z"},{"affected":"16.16.0","affected_versions_present":true,"cve_id":"CVE-2026-42840","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42840","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-03T18:59:26.898Z","patch_url":"","primary_source":"","published":"2026-06-03T17:35:04.126Z"},{"affected":">= 16.0.0-beta.1, < 16.11.0; < 15.102.0","affected_versions_present":true,"cve_id":"CVE-2026-44448","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44448","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T12:41:34.715Z","patch_url":"","primary_source":"","published":"2026-05-13T21:20:20.570Z"},{"affected":"< 16.9.0","affected_versions_present":true,"cve_id":"CVE-2026-44447","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44447","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-15T18:33:57.673Z","patch_url":"","primary_source":"","published":"2026-05-13T21:19:07.916Z"},{"affected":">= 16.0.0-beta.1, < 16.14.0; < 15.104.3","affected_versions_present":true,"cve_id":"CVE-2026-44446","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44446","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T13:31:08.843Z","patch_url":"","primary_source":"","published":"2026-05-13T21:18:17.477Z"},{"affected":">= 16.0.0-beta.1, < 16.12.0; < 15.104.3","affected_versions_present":true,"cve_id":"CVE-2026-44445","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44445","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T15:56:29.342Z","patch_url":"","primary_source":"","published":"2026-05-13T21:17:06.551Z"},{"affected":"< 15.106.0; >= 16.0.0-beta.1, < 16.16.0","affected_versions_present":true,"cve_id":"CVE-2026-44441","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44441","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T12:50:24.851Z","patch_url":"","primary_source":"","published":"2026-05-13T21:14:31.015Z"},{"affected":"< 15.101.1; >= 16.0.0-beta.1, < 16.10.0","affected_versions_present":true,"cve_id":"CVE-2026-44440","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44440","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T12:46:25.313Z","patch_url":"","primary_source":"","published":"2026-05-13T21:12:52.940Z"},{"affected":"< 16.9.1","affected_versions_present":true,"cve_id":"CVE-2026-44442","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44442","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-14T19:52:05.513Z","patch_url":"","primary_source":"","published":"2026-05-13T21:11:14.186Z"},{"affected":">= 16.0.0-beta.1, < 16.8.0; < 15.100.0","affected_versions_present":true,"cve_id":"CVE-2026-32954","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32954","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-20T14:27:42.195Z","patch_url":"","primary_source":"","published":"2026-03-20T04:30:26.360Z"},{"affected":">= 16.0.0-rc.1, < 16.6.1; < 15.98.1","affected_versions_present":true,"cve_id":"CVE-2026-27471","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27471","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-24T18:53:57.291Z","patch_url":"https://github.com/frappe/erpnext/commit/78fc9424d9085c2eafe1211931e22d7044f85fc7","primary_source":"","published":"2026-02-21T06:38:11.220Z"},{"affected":">=15.0.0, < 15.76.0; < 14.89.2","affected_versions_present":true,"cve_id":"CVE-2025-58439","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-58439","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-09-08T14:06:07.055Z","patch_url":"","primary_source":"","published":"2025-09-06T00:30:26.689Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Frappe"}}