Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-10655
8.8
HIGHCVSS v3
Severity scale
010
Description
SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This issue affects Frappe HelpDesk: 1.14.0.
GitHub