CVE-2026-39352

Vulnerability Description

Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above.

Vulnerability Details

Published Date

May 20, 2026

Last Modified

May 21, 2026

CWE ID

CWE-22

Source

NVD

Vendor

frappe

Product

frappe

External References

https://github.com/frappe/frappe/releases/tag/v16.15.0
https://github.com/frappe/frappe/security/advisories/GHSA-67rf-pxgh-vfqv

CVE-2026-39352

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment