Frappe press

• CVE-2026-41430 Low 1.3 Press vulnerable to reflected XSS on login redirection 0.2%
• CVE-2026-41317 Medium 6.6 Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation 0.2%
• CVE-2025-59421 Low 2.7 Press vulnerable to email flooding to users due to lack of validation and rate limits 0.4%
• CVE-2025-53545 Medium 6.9 Press has a potential 2FA bypass 0.3%
• CVE-2024-50356 None 0.0 Press has a potential 2FA bypass 0.4%
• CVE-2024-49751 Low 1.2 Frappe Press possible HTML injection through SaaS Signup inputs 0.5%