EUVD-2024-0425

Malicious code in bioql PyPI...

EUVD-2022-1529

Malicious code in bioql PyPI...

EUVD-2025-24198

Malicious code in bioql PyPI...

EUVD-2025-3543

Malicious code in bioql PyPI...

EUVD-2025-4017

Malicious code in bioql PyPI...

EUVD-2023-43320

Malicious code in bioql PyPI...

EUVD-2025-12232

Malicious code in bioql PyPI...

EUVD-2025-14374

Malicious code in bioql PyPI...

EUVD-2023-28443

Malicious code in bioql PyPI...

EUVD-2023-28440

Malicious code in bioql PyPI...

EUVD-2025-30593

Malicious code in bioql PyPI...

EUVD-2023-45161

Malicious code in bioql PyPI...

EUVD-2023-32426

Malicious code in bioql PyPI...

EUVD-2022-39071

Malicious code in bioql PyPI...

EUVD-2022-5856

Malicious code in bioql PyPI...

CVE-2025-52043

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

CVE-2025-52043

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

CVE-2025-52043

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

PT-2025-39989

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The import coa function located at erpnext/accounts/doctype/chart of accounts importer/chart of accounts importer.py is susceptible to SQL injection. An attacker can inject a SQL query through the...

CVE-2025-52043

Frappe ERPNext v15.57.5 is vulnerable to SQL injection in the import_coa() function located at erpnext/accounts/doctype/chart_of_accounts_importer/chart_of_accounts_importer.py. The root cause is a lack of validation for the company parameter, which allows an attacker to inject malicious SQL quer...