High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-06	CVE-2023-41328	SQL Injection vulnerability in Frappe Frappe is a low code web framework written in Python and Javascript. network low complexity frappe CWE-89	7.5
2019-08-12	CVE-2019-14965	Code Injection vulnerability in Frappe An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. network low complexity frappe CWE-94	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.