sapui5_frame_options_allowlist vulnerabilities

CVEs whose affected-version data names the sapui5_frame_options_allowlist package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-76977Medium· 4.3

2w ago

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restrictions. If an authenticated victim visits the attacker's p…

▾ SunlitSAP_SE · SAPUI5(Frame Options Allowlist)EPSS 0.22%via NVD