EUVD-2025-32006

Malicious code in bioql PyPI...

CVE-2025-52042

CVE-2025-52042 affects Frappe ERPNext 15.57.5. The vulnerable component is the function get_rfq_containing_supplier() in erpnext/buying/doctype/request_for_quotation/request_for_quotation.py, due to lack of validation of the txt parameter against externally entered SQL, enabling SQL Injection to ...