Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-44440
6.5
MEDIUMCVSS v3
Published
May 13, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability on an endpoint allows an authenticated adjacent attacker to read arbitrary files. This vulnerability is fixed in 15.101.1 and 16.10.0.
frappe/erpnext
GitHubFree and Open Source Enterprise Resource Planning (ERP)
GitHubFree and Open Source Enterprise Resource Planning (ERP)< 15.101.1, >= 16.0.0, < 16.10.0NVD