CVE-2026-62315

Frappe (full-stack web application framework) is affected by a type confusion vulnerability in frappe.client.set_value (frappe/client.py) in version 16.31.0 and earlier . The function validates a dictionary supplied via the fieldname parameter against forbidden standard and child-table fields bef...