Frappe code injection vulnerability

Versions prior to Frappe 15.111.0 and versions 16.x prior to 16.21.0 contain a code injection vulnerability. This vulnerability arises because user-controlled message fields are rendered as templates without being sanitized, leading to server-side template injection. Attackers who have...