Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-35175
5.3
MEDIUMCVSS v3
Published
December 11, 2020
CVSS v2
5 MEDIUM
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
frappe/frappe
GitHubLow code web framework for real world applications, in Python and Javascript
GitHubLow code web framework for real world applications, in Python and Javascript>= 12.0.0, <= 12.12.0, = 13.0.0NVD
FrappeNuGet GalleryThe core implementation library for Frappe. Frappe is a compile time bundler for JavaScript, Css, and Less for high volume, high performance ASP.NET sites.
NuGet GalleryThe core implementation library for Frappe. Frappe is a compile time bundler for JavaScript, Css, and Less for high volume, high performance ASP.NET sites.>= 12.0.0, <= 12.12.0, = 13.0.0NVD
Crates.io
NPM