{"api_version":"v1","generated_at":"2026-10-10T05:40:00+00:00","product":{"cve_count":68,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-frappe-frappe-1d1c5a83da5a","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/frappe","name":"Frappe","next_cursor":"djE6NTA","observations":[{"affected":"Frappe: < 14.49.0","affected_versions_present":true,"cve_id":"CVE-2023-51769","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-51769","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T14:35:09.429Z","patch_url":"","primary_source":"","published":"2026-09-14T00:00:00.000Z"},{"affected":"frappe: 0a80046da32bb8976cd7854f551c179a4a06b1b3 < 37d2eb59790633da01c741b950cc00ca3558c494","affected_versions_present":true,"cve_id":"CVE-2026-82634","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82634","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-31T16:53:42.114Z","patch_url":"","primary_source":"","published":"2026-08-30T12:34:52.482Z"},{"affected":"frappe: 15.11.0 \u2264 16.32.0","affected_versions_present":true,"cve_id":"CVE-2026-81731","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-81731","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-09-24T14:19:50.988Z","patch_url":"https://github.com/frappe/frappe/commit/9f65e5ceca71aae91dcfd9bb3c0904afd386a01a","primary_source":"","published":"2026-08-27T20:07:35.561Z"},{"affected":"< 15.115.0","affected_versions_present":true,"cve_id":"CVE-2026-66003","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66003","fixed":"15.115.0.","last_modified":"2026-08-27T14:44:42.733Z","patch_url":"https://github.com/frappe/frappe/security/advisories/GHSA-p25m-7rvg-6fvr","primary_source":"","published":"2026-08-26T19:30:28.968Z"},{"affected":"< 15.115.0; >= 16.0.0-beta.1, < 16.27.0","affected_versions_present":true,"cve_id":"CVE-2026-66002","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66002","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-21T21:46:12.905Z","patch_url":"","primary_source":"","published":"2026-08-20T18:29:40.872Z"},{"affected":"frappe: < 15.114.0, >= 16.0.0-beta.1, < 16.26.0","affected_versions_present":true,"cve_id":"CVE-2026-66001","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66001","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-25T15:20:17.550Z","patch_url":"","primary_source":"","published":"2026-08-20T18:27:32.056Z"},{"affected":"<= 16.31.0","affected_versions_present":true,"cve_id":"CVE-2026-62315","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-62315","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-20T18:56:44.457Z","patch_url":"","primary_source":"","published":"2026-08-20T18:25:01.277Z"},{"affected":"<= 16.31.0","affected_versions_present":true,"cve_id":"CVE-2026-63654","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63654","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-20T19:47:38.338Z","patch_url":"","primary_source":"","published":"2026-08-20T18:23:52.994Z"},{"affected":"<= 16.31.0","affected_versions_present":true,"cve_id":"CVE-2026-53569","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-53569","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-20T19:03:07.692Z","patch_url":"","primary_source":"","published":"2026-08-20T18:15:20.170Z"},{"affected":">= 16.0.0-beta.1, < 16.19.0; >= 15.0.0, < 15.109.0","affected_versions_present":true,"cve_id":"CVE-2026-66000","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66000","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T18:39:50.944Z","patch_url":"","primary_source":"","published":"2026-08-07T18:25:11.671Z"},{"affected":"< 14.96.10; >= 15.0.0, < 15.72.0","affected_versions_present":true,"cve_id":"CVE-2025-58375","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-58375","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-17T18:18:09.043Z","patch_url":"","primary_source":"","published":"2026-08-07T18:21:10.445Z"},{"affected":">= 16.0.0-beta.1, < 16.20.0; < 15.112.0","affected_versions_present":true,"cve_id":"CVE-2026-66058","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66058","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-10T11:59:36.362Z","patch_url":"","primary_source":"","published":"2026-08-07T17:54:09.633Z"},{"affected":">= 16.0.0-beta.1, < 16.20.0; < 15.112.0","affected_versions_present":true,"cve_id":"CVE-2026-66059","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66059","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-08T02:54:58.969Z","patch_url":"","primary_source":"","published":"2026-08-07T15:21:51.134Z"},{"affected":">= 16.0.0-beta.1, < 16.19.0; < 15.109.0","affected_versions_present":true,"cve_id":"CVE-2026-49391","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49391","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:21:30.582Z","patch_url":"","primary_source":"","published":"2026-08-06T21:36:24.520Z"},{"affected":"< 15.110.0; >= 16.0.0-beta.1, < 16.20.0","affected_versions_present":true,"cve_id":"CVE-2026-47765","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47765","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T15:35:24.116Z","patch_url":"","primary_source":"","published":"2026-08-06T21:25:31.501Z"},{"affected":">= 16.0.0-beta.1, < 16.18.3; < 15.108.0","affected_versions_present":true,"cve_id":"CVE-2026-47194","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47194","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-07T17:11:41.256Z","patch_url":"","primary_source":"","published":"2026-08-06T21:19:19.342Z"},{"affected":"< 16.18.0","affected_versions_present":true,"cve_id":"CVE-2026-47185","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47185","fixed":"16.18.0.","last_modified":"2026-08-07T17:13:44.152Z","patch_url":"https://github.com/frappe/frappe/security/advisories/GHSA-mcr4-jc52-ww6x","primary_source":"","published":"2026-08-06T21:08:14.037Z"},{"affected":"< 15.112.0; >= 16.0.0-beta.1, < 16.23.0","affected_versions_present":true,"cve_id":"CVE-2026-55852","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55852","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-13T14:11:14.738Z","patch_url":"","primary_source":"","published":"2026-07-10T21:28:29.445Z"},{"affected":"< 15.109.0; >= 16.0.0-beta.1, < 16.19.0","affected_versions_present":true,"cve_id":"CVE-2026-42219","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-42219","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-13T14:15:58.161Z","patch_url":"","primary_source":"","published":"2026-07-10T21:26:30.005Z"},{"affected":"< 16.19.0","affected_versions_present":true,"cve_id":"CVE-2026-49394","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49394","fixed":"16.19.0.","last_modified":"2026-07-13T16:17:40.190Z","patch_url":"https://github.com/frappe/frappe/security/advisories/GHSA-r24j-xrj8-273q","primary_source":"","published":"2026-07-10T21:24:47.624Z"},{"affected":"< 15.110.0; >= 16.0.0-beta.1, < 16.20.0","affected_versions_present":true,"cve_id":"CVE-2026-48127","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48127","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T14:13:11.460Z","patch_url":"","primary_source":"","published":"2026-07-10T21:23:37.101Z"},{"affected":"< 16.18.3","affected_versions_present":true,"cve_id":"CVE-2026-41482","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41482","fixed":"16.18.3.","last_modified":"2026-07-13T17:58:54.127Z","patch_url":"https://github.com/frappe/frappe/security/advisories/GHSA-234v-jfr8-v2f8","primary_source":"","published":"2026-07-10T21:20:36.507Z"},{"affected":"< 15.108.0; >= 16.0.0-beta.1, < 16.18.3","affected_versions_present":true,"cve_id":"CVE-2026-47199","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47199","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-13T15:59:34.730Z","patch_url":"","primary_source":"","published":"2026-07-10T21:14:12.195Z"},{"affected":"< 15.106.0; >= 16.0.0-beta1, < 16.16.0","affected_versions_present":true,"cve_id":"CVE-2026-58503","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-58503","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-13T18:55:05.081Z","patch_url":"","primary_source":"","published":"2026-07-10T21:12:28.742Z"},{"affected":"< 15.107.5; >= 16.0.0-beta.1, < 6.18.2","affected_versions_present":true,"cve_id":"CVE-2026-47422","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47422","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T14:35:18.141Z","patch_url":"","primary_source":"","published":"2026-07-10T21:09:58.177Z"},{"affected":"< 15.107.2; < 16.17.4","affected_versions_present":true,"cve_id":"CVE-2026-53568","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-53568","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:08:22.842Z","patch_url":"","primary_source":"","published":"2026-06-12T14:45:11.531Z"},{"affected":"< 15.107.0; < 16.17.0","affected_versions_present":true,"cve_id":"CVE-2026-50026","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50026","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:07:17.900Z","patch_url":"","primary_source":"","published":"2026-06-12T14:43:41.190Z"},{"affected":"< 16.17.4","affected_versions_present":true,"cve_id":"CVE-2026-47182","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47182","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:26:53.911Z","patch_url":"","primary_source":"","published":"2026-06-12T14:39:57.995Z"},{"affected":"< 16.17.4","affected_versions_present":true,"cve_id":"CVE-2026-44976","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44976","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T15:57:57.457Z","patch_url":"","primary_source":"","published":"2026-06-12T14:38:00.385Z"},{"affected":"< 15.107.2; < 16.17.4","affected_versions_present":true,"cve_id":"CVE-2026-44975","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44975","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:43:56.354Z","patch_url":"","primary_source":"","published":"2026-06-12T14:35:55.444Z"},{"affected":"< 15.107.2; < 16.17.4","affected_versions_present":true,"cve_id":"CVE-2026-44206","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44206","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T15:58:30.973Z","patch_url":"","primary_source":"","published":"2026-06-12T14:34:00.833Z"},{"affected":"< 15.107.0; < 16.17.0","affected_versions_present":true,"cve_id":"CVE-2026-44207","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44207","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:28:29.384Z","patch_url":"","primary_source":"","published":"2026-06-12T14:27:58.128Z"},{"affected":"< 15.107.0; < 16.17.0","affected_versions_present":true,"cve_id":"CVE-2026-44208","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44208","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-13T03:14:01.435Z","patch_url":"","primary_source":"","published":"2026-06-12T14:26:17.323Z"},{"affected":"< 15.106.0","affected_versions_present":true,"cve_id":"CVE-2026-44205","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44205","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:02:36.022Z","patch_url":"","primary_source":"","published":"2026-06-12T14:23:45.308Z"},{"affected":"< 15.106.0; < 16.16.0","affected_versions_present":true,"cve_id":"CVE-2026-41581","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41581","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T14:56:53.836Z","patch_url":"","primary_source":"","published":"2026-06-12T14:22:46.804Z"},{"affected":"< 15.106.0; < 16.16.0","affected_versions_present":true,"cve_id":"CVE-2026-47739","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47739","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-12T16:30:37.147Z","patch_url":"","primary_source":"","published":"2026-06-12T14:22:21.118Z"},{"affected":"< 15.105.0; >= 15.106.0, < 16.15.0","affected_versions_present":true,"cve_id":"CVE-2026-39352","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39352","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-21T14:25:31.245Z","patch_url":"","primary_source":"","published":"2026-05-20T19:27:01.543Z"},{"affected":"16.10.0","affected_versions_present":true,"cve_id":"CVE-2026-3837","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-3837","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-27T17:37:35.899Z","patch_url":"https://github.com/frappe/frappe/pull/38796","primary_source":"","published":"2026-04-22T19:52:56.248Z"},{"affected":"16.10.10","affected_versions_present":true,"cve_id":"CVE-2026-3673","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-3673","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T19:58:00.187Z","patch_url":"","primary_source":"","published":"2026-04-22T19:32:36.622Z"},{"affected":"< 15.104.0; >= 16.0.0-beta.1, < 16.14.0","affected_versions_present":true,"cve_id":"CVE-2026-39351","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-39351","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T16:10:37.051Z","patch_url":"","primary_source":"","published":"2026-04-07T18:52:01.531Z"},{"affected":"< 15.104.0; >= 16.0.0-beta.1, < 16.14.0","affected_versions_present":true,"cve_id":"CVE-2026-35614","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-35614","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-09T14:41:12.703Z","patch_url":"","primary_source":"","published":"2026-04-07T16:42:12.740Z"},{"affected":"< 16.10.0","affected_versions_present":true,"cve_id":"CVE-2026-31879","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31879","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-11T19:30:30.761Z","patch_url":"","primary_source":"","published":"2026-03-11T18:34:18.375Z"},{"affected":">= 16.0.0, < 16.6.0; >= 15.0.0, < 15.100.0; < 14.100.1","affected_versions_present":true,"cve_id":"CVE-2026-31878","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31878","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-11T19:54:06.626Z","patch_url":"","primary_source":"","published":"2026-03-11T18:32:04.397Z"},{"affected":">= 15.0.0, < 15.84.0; < 14.99.0","affected_versions_present":true,"cve_id":"CVE-2026-31877","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-31877","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-12T20:07:46.367Z","patch_url":"","primary_source":"","published":"2026-03-11T18:28:35.596Z"},{"affected":"< 15.100.0; < 14.100.1","affected_versions_present":true,"cve_id":"CVE-2026-29081","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29081","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-06T17:02:00.462Z","patch_url":"","primary_source":"","published":"2026-03-05T20:23:13.490Z"},{"affected":"< 15.98.0; < 14.100.0","affected_versions_present":true,"cve_id":"CVE-2026-29077","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29077","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-06T17:02:25.318Z","patch_url":"","primary_source":"","published":"2026-03-05T20:22:09.612Z"},{"affected":"< 16.11.0; < 15.102.0","affected_versions_present":true,"cve_id":"CVE-2026-28436","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28436","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-06T17:02:52.965Z","patch_url":"","primary_source":"","published":"2026-03-05T20:21:35.392Z"},{"affected":"< 14.99.14; >= 15.0.0, < 15.94.0","affected_versions_present":true,"cve_id":"CVE-2026-25956","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25956","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-10T19:27:58.893Z","patch_url":"https://github.com/frappe/frappe/commit/22cac9dd240dc1fa00d4bab7e3887b70faf22bd1","primary_source":"","published":"2026-02-10T17:39:20.430Z"},{"affected":"< 14.99.6; >= 15.0.0, < 15.88.1","affected_versions_present":true,"cve_id":"CVE-2025-68953","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-68953","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-06T19:04:38.829Z","patch_url":"https://github.com/frappe/frappe/commit/3867fb112c3f7be1a863e40f19e9235719f784fb","primary_source":"","published":"2026-01-05T21:53:39.251Z"},{"affected":"< 14.99.6; >= 15.0.0, < 15.88.1","affected_versions_present":true,"cve_id":"CVE-2025-68929","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-68929","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-29T16:13:17.680Z","patch_url":"","primary_source":"","published":"2025-12-29T15:10:59.510Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Frappe"}}