Frappe Hr (Frappe) - vulnerabilities (CVEs)

5 CVEs, 2 in the last 30 days, 293 known versions, newest CVE from 2026-10-11. Vendor: Frappe.

CVEs of Frappe Hr

• CVE-2026-108733 - CVSS 5.3 (medium), 2026-10-11: Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted…
• CVE-2026-108732 - CVSS 5.3 (medium), 2026-10-11: Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted…
• CVE-2026-41320 - CVSS 6.5 (medium), 2026-04-21: Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.54.0 and 14.38.1, a specially crafted request made to a certain…
• CVE-2026-40889 - CVSS 6.5 (medium), 2026-04-21: Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.58.2 and 16.4.2, authenticated users can access unauthorized…
• CVE-2026-40888 - CVSS 6.5 (medium), 2026-04-21: Frappe HR is an open-source human resources management solution (HRMS). Prior to versions 15.58.1 and 16.4.1, an authenticated user with default role can…