Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Frappe HRM Multiple Modules Missing Authorization Check Patch

github.com 2026-10-12 查看中文 →

Security Advisory High Frappe

Affected:

frappe/hrms

Fixed in:

6ab7a50

Referenced CVEs: CVE-2026-108732 · 4.3 CVE-2026-108733 · 4.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Plane ORM order_by Injection Fix: Allowlist Implementation Guide 2026-10-14 Plane Unauthenticated ORM Field Injection via order_by (CVE-943) 2026-10-14 Plane ORM Sorting Injection Vulnerability Fix via Whitelist 2026-10-14 Stored XSS in Plane Work Item Comments (CVE-2024-XXXX) 2026-10-14 Unauthenticated API Endpoint Leads to Workspace Invitation Token Leakage (PoC) 2026-10-14

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro