Fresh Framework vulnerabilities

2 known vulnerabilities in Fresh Framework from FRESHFACE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Fresh Framework: Missing Authorization

  CVE-2025-26961Mar 15, 2025FRESHFACE

  Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Fresh Framework: from n/a through <= 1.70.0.

• 10.0 Critical severity

  Fresh Framework: Improper Control of Generation of Code

  CVE-2025-26936Mar 10, 2025FRESHFACE

  Improper Control of Generation of Code ('Code Injection') vulnerability in FRESHFACE Fresh Framework fresh-framework allows Code Injection.This issue affects Fresh Framework: from n/a through <= 1.70.0.