Advisories for Pypi/Frappe package

SQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information.

Making crafted requests could lead to information disclosure that could further lead to account takeover.

An SQL Injection vulnerability has been identified in Frappe Framework which could allow a malicious actor to access sensitive information.

A system user was able to create certain documents in a specific way that could lead to RCE.