Repository navigation
Security: frappe/builder
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Any authenticated user can spend the site's AI provider credits through improve_promptGHSA-58mj-c563-p78w published
Oct 26, 2026 by surajshetty3416Moderate -
Any authenticated user can make the server fetch internal URLs and write files through convert_to_webpGHSA-5qcg-q3jf-fjcg published
Oct 26, 2026 by surajshetty3416Moderate -
SSRF guard bypass through redirects and DNS rebinding in remote asset fetchesGHSA-hvrf-fhv3-3v7p published
Oct 26, 2026 by surajshetty3416Moderate
Learn more about advisories related to frappe/builder in the GitHub Advisory Database