CVE-2026-39352
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 20, 2026
Vendor
unknown
Description
Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above.