CVE-2026-115720

Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assertnotprivateurl guard validates only the initial hostname before callers invoke requests.geturl with default redirect-following and no IP pinning, allowing an attacker-supplied public...

CVE-2026-115720 Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect

Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assertnotprivateurl guard validates only the initial hostname before callers invoke requests.geturl with default redirect-following and no IP pinning, allowing an attacker-supplied public...

CVE-2026-115720 Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect

Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assertnotprivateurl guard validates only the initial hostname before callers invoke requests.geturl with default redirect-following and no IP pinning, allowing an attacker-supplied public...

CVE-2026-115720

Frappe Builder versions before 1.36.1 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability in builder/api.py. The root cause is that the assert_not_private_url() guard only validates the initial hostname, while subsequent requests.get(url) calls follow redirects by default without...

EUVD-2026-109785

Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assertnotprivateurl guard validates only the initial hostname before callers invoke requests.geturl with default redirect-following and no IP pinning, allowing an attacker-supplied public...