high8.7
CVE-2026-39352
Frappe is a full-stack web application framework.
Impact
Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above.
Affected products
| Product | Affected versions |
|---|---|
| Frappe Is A Full-Stack Web Application Framework. | before 15.105.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.