CMS

frappe/frappe

Low code web framework for real world applications, in Python and Javascript

#frappe#erpnext#python#javascript#web-framework#full-stack#email#multitenant#rest-api#webhooks#socket-io#security#postgres#mariadb#low-code#cms

スコア

/ 100

Star

10,096

Fork

4,951

Open Issue

2,216

サイズ

681MB

言語

Python ★

最終push

0 日前

Docker

—

採点内訳

過去CVE 18件 (やや多い)

✓

直近 push: 0 日前

✓

得意言語 (Python)

✓

オープンissue 2216件

✓

超大規模 (0.7GB)

—

Docker 未対応

—

10k–50k: 中級 (★10,096)

—

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (20 件)

CRITICALGHSA-67rf-pxgh-vfqv CVE-2026-393522026/5/11
Arbitrary File Read via Path Traversal
MEDIUMGHSA-8ggw-hfr6-rw3x CVE-2026-393512026/4/7
Unrestricted Doctype access via API exploit
HIGHGHSA-583g-fg76-fhfr CVE-2026-356142026/4/5
Possibility of SQL injection in bulk_update
MEDIUMGHSA-qmhf-rgx2-8p25 CVE-2026-318792026/3/11
Workspace modification and stored XSS due to improper resource ownership checks
MEDIUMGHSA-mggg-hmjm-j6c2 CVE-2026-318782026/3/11
Possible SSRF by any authenticated user
MEDIUMGHSA-2c4m-999q-xhx4 CVE-2026-318772026/3/11
Possibility of SQL Injection due to improper field sanitization
MEDIUMGHSA-w3g7-m7xr-2w38 CVE-2026-290812026/3/5
Possibility of SQL Injection due to improper fieldname sanitization
HIGHGHSA-5h4c-9p23-4c3m CVE-2026-290772026/3/5
Broken Access Control in DocShare
LOWGHSA-vm63-r48g-7wqh CVE-2026-284362026/2/28
Stored XSS in avatar_macro.html
MEDIUMGHSA-7m8v-g2pr-h2f7 CVE-2026-259562026/2/10
XSS and Open Redirect in Sign Up
HIGHGHSA-xj39-3g4p-f46v CVE-2025-689532026/1/5
Path traversal allowed reading certain files
CRITICALGHSA-qq98-vfv9-xmxh CVE-2025-689292025/12/29
Possibility of RCE due to SSTI
MEDIUMGHSA-cx24-w5gm-5vv92025/12/24
Authenticated XSS via leaderboard
MEDIUMGHSA-v4wg-gqfr-rpjm CVE-2025-662062025/12/1
Path traversal allowed reading certain files
HIGHGHSA-mp93-8vxr-hqq9 CVE-2025-662052025/12/1
Possibility of SQL Injection due to improper validations
MEDIUMGHSA-qrq5-v93p-8xhw2025/10/24
Possible LDAP injection due to unsanitised inputs
MEDIUMGHSA-j9jr-qrpj-g855 CVE-2025-624072025/10/16
Open Redirect on Login Page
HIGHGHSA-mggw-6xqj-rphj CVE-2025-520482025/9/4
Possibility of SQL injection due to missing validation
HIGHGHSA-6rpr-2hjx-w9vp CVE-2025-557322025/8/20
Possibility of SQL Injection due to improper validations
HIGHGHSA-5p8f-568f-vfq2 CVE-2025-557312025/8/20
Possibility of Authenticated SQL Injection due to improper validations