Login Request a demo
PR
Product
press
by frappe · last CVE Apr 24, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 2
Severity
All severities6Critical0High1Medium2Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add press to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41317
7.5
0%
Apr 24
Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation
Affected: < 52ea2f2d1b587be0807557e96f025f47897d00fd
CVE-2025-53545
6.9
0%
Jul 8
Press has a potential 2FA bypass
Affected: < ddb439f8eb1816010f2ef653a908648b71f9bba8
CVE-2026-41430
6.1
0%
Apr 24
Press vulnerable to reflected XSS on login redirection
Affected: < 16d1b6ca2559f858a1de77bcb03fd7f1b81671c6
CVE-2025-59421
2.7
0%
Sep 18
Press vulnerable to email flooding to users due to lack of validation and rate limits
Affected: < 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615
CVE-2024-49751
1.2
0%
Oct 23
Frappe Press possible HTML injection through SaaS Signup inputs
Affected: < 5d118a902872d7941f099ad1fb918e2421e79ccd
CVE-2024-50356
0.0
0%
Oct 31
Press has a potential 2FA bypass
Affected: < ba0007c28ac814260f836849bc07d29beea7deb6
Showing 6