LM
Product
lms
by frappe · last CVE Sep 17, 2026
23
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 17Low 2
Watch

Add lms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-55006
8.8
0%
Aug 9
Frappe Learning Holds Potential for Malicious SVG Upload in Image Upload Feature
Affected: <= 2.33.0
CVE-2026-54343
8.7
1%
Sep 17
Frappe LMS: Path Traversal in SCORM File Serving
Affected: < 2.52.1
CVE-2026-39385
7.1
0%
Jul 20
Frappe LMS enrollment bypass in paid courses via unrelated batch
Affected: <= 2.51.0
Showing 3