https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T09:02:11.578236+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-52042 CVE-2025-52042 2026-10-02T09:02:11.803888+00:00

In Frappe ERPNext 15.57.5, the function get_rfq_containing_supplier() at erpnext/buying/doctype/request_for_quotation/request_for_quotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter.