CVE-2026-126316

The software Frappe HRMS versions 16.0.0 before 16.20.1 is affected by an information exposure vulnerability (CWE-598). The application places the subscription key in the query string of outbound subscription status requests. Consequently, attackers who can access proxy, server, or monitoring log...

EUVD-2026-125204

Frappe HRMS from 16.0.0 before 16.20.1 contains an information exposure vulnerability that places the subscription key in the query string of outbound subscription status requests. Attackers with access to proxy, server, or monitoring logs along the request path can recover the site's subscriptio...

CVE-2026-111821

Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientId and subscription name that have a combined length 65,535 while separately being shorter on a broker using KahaDB which can cause the broker to shutdown and ...