CVE-2025-52041

In Frappe ERPNext version 15.57.5 , a SQL Injection vulnerability exists within the get_stock_balance_for() function located at erpnext/stock/doctype/stock_reconciliation/stock_reconciliation.py. An attacker can exploit this by injecting a malicious SQL query into the inventory_dimensions_dict pa...