HR vulnerabilities

CVEs whose affected-version data names the HR package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101006Medium· 4.3

today

A flaw has been found in Frappe HR up to 16.15.0

A flaw has been found in Frappe HR up to 16.15.0. This vulnerability affects the function get_expense_claims/get_shift_requests/get_attendance_requests of the file hrms/api/__init__.py of the component Permission Validation. This manipul…

▾ SunlitFrappe · HRvia NVD