← Database

CVE-2026-42219

N/A CVSS: N/A Published: 2026-07-10 Modified: 2026-07-13

Description

Frappe is a full-stack web application framework. Prior to 16.19.0 and 15.109.0, path traversal via download_backups was possible due to lack of hardening. This issue is fixed in versions 16.19.0 and 15.109.0.

Affected Platforms

Unknown

Weakness Type

CWE-22

References