EUVD-2025-32006

Malicious code in bioql PyPI...

CVE-2025-52042

In Frappe ERPNext version 15.57.5 , the get_rfq_containing_supplier() function located at erpnext/buying/doctype/request_for_quotation/request_for_quotation.py is vulnerable to SQL Injection . The root cause is a lack of validation for the txt parameter , which allows an attacker to inject malici...