Frappe Desk: Unauthorized Field Read Bypass Fix in document_follow

github.com 2026-08-08查看中文 →

Security AdvisoryHighFrappe

Affected:

Frappe < latest patch

Fixed in:

latest patch (commit d6a214d)

Referenced CVEs: CVE-2026-66059 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

KubeVirt FakeFish Unauthenticated Backend Access Vulnerability (CVE-2023-7356) 2026-08-17 Roundcube Webmail 1.6.18 Security Update: Multiple Vulnerabilities (SSRF, RCE, LFI) 2026-08-17 Roundcube Webmail 1.7.3 Security Update: Fixes RCE, SSRF, XSS Vulnerabilities 2026-08-17 Roundcube Remote Content Block Bypass and SSRF Filter Bypass Fix 2026-08-17 Roundcube SVG unclosed URL bypass remote content blocking fix 2026-08-17

Offline Archive

Offline screenshot & PDF are Pro-exclusive