Servers and applications
GHSA-r8px-9662-x39c
Authenticated Arbitrary File Read via File Attachment Handling
- Severity
- High 7.7
- Published
- 6 Nov 2026
- Last changed
- 6 Nov 2026
- Added to UpHeron
- 6 Nov 2026
- Fixed in
- 15.120.1, 16.33.1
- Sources
- Project advisories (GitHub)
Affected software
| Software | Affected versions |
|---|---|
Frappe FrameworkServers and applications · github:frappe/frappe |
|
References
- GitHub Advisory Database https://github.com/advisories/GHSA-r8px-9662-x39c
- github.com https://github.com/frappe/frappe/security/advisories/GHSA-r8px-9662-x39c