EUVD-2025-30213

Malicious code in bioql PyPI...

CVE-2025-30213

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an...

pytest-frappe (=0.0.1) potentially affected by CVE-2025-30213 via frappe (=0.0.1)

frappe PYPI version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on frappe and may be impacted: - pytest-frappe =0.0.1 Source cves: CVE-2025-30213 Source advisory: OSV:GHSA-V342-4XR9-X3Q3...

CVE-2025-30213

creationtimestamp| type| source ---|---|--- 2025-03-25 15:24:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8690 2025-03-25 17:49:06+00:00| seen| https://t.me/cvedetector/21100 2025-03-25 18:59:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll7xdpjzy...

CVE-2025-30213 Frappe has Possibility of Remote Code Execution due to improper validation

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an...

CVE-2025-30213 Frappe has Possibility of Remote Code Execution due to improper validation

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an...

CVE-2025-30213 Frappe has Possibility of Remote Code Execution due to improper validation

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an...