CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

PT-2025-37718

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 15.72.0 Frappe versions prior to 14.96.10 Description The add tag function at frappe/desk/doctype/tag/tag.py is susceptible to SQL Injection. This allows an attacker to extract information from databases by injecting a...

CVE-2025-52048

Frappe CVE-2025-52048 affects Frappe 15.x.x prior to 15.72.0 and 14.x.x prior to 14.96.10. The vulnerability is a SQL Injection in the add_tag() function located at frappe/desk/doctype/tag/tag.py, where the dt parameter can be exploited to extract data from the database. Remediation: upgrade to F...

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

Malicious code in fk-cs-dashboards-dt-error-string (npm)

The package fk-cs-dashboards-dt-error-string was found to contain malicious code...

Malicious code in fk-cs-dashboards-dt-issue-type (npm)

The package fk-cs-dashboards-dt-issue-type was found to contain malicious code...

Malicious code in @zalastax/nolb-dt (npm)

The package @zalastax/nolb-dt was found to contain malicious code...

Malicious code in angular-dt-relay (npm)

The package angular-dt-relay was found to contain malicious code...

Malicious code in dt-oneagent-tailor (npm)

The package dt-oneagent-tailor was found to contain malicious code...

MAL-2025-20649 Malicious code in fk-cs-dashboards-dt-issue-type (npm)

The package fk-cs-dashboards-dt-issue-type was found to contain malicious code...

MAL-2025-14526 Malicious code in angular-dt-relay (npm)

The package angular-dt-relay was found to contain malicious code...

MAL-2025-11236 Malicious code in @zalastax/nolb-dt (npm)

The package @zalastax/nolb-dt was found to contain malicious code...

MAL-2025-18948 Malicious code in dt-oneagent-tailor (npm)

The package dt-oneagent-tailor was found to contain malicious code...

CVE-2025-7726 The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes

The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via its lightbox rendering code in all versions up to, and including, 12.6.0 due to insufficient input sanitization and output escaping. The theme’s JavaScript reads user-supplied 'title' and 'data-dt-img-description'...

Malicious code in dt-retag-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d21deb5c26c8d9b0043ce26b0fe5ec1625607ab1e1c37102589f92ab7187364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-internal-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c720ae7505ae2c4d74c0ce8cea7fdb4961f4de5c0fddc8c485c7b66c87097d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dt-automation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6eeff9a72134c244b969bcd674f473359fea30bfe4423298194db75e255a238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5772 Malicious code in dt-automation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6eeff9a72134c244b969bcd674f473359fea30bfe4423298194db75e255a238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5773 Malicious code in dt-internal-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c720ae7505ae2c4d74c0ce8cea7fdb4961f4de5c0fddc8c485c7b66c87097d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...