Frappe Technologies vulnerabilities
We track 1 vulnerability in Frappe Technologies products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Frappe Technologies vulnerabilities
- 8.8 High severity
Frappe Framework (ERPNext): Improper Control of Generation of Code
Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame introspection. Attackers can create a server script via the /app/