How many CVEs have patched select?

11 published CVEs changed select in frappe/erpnext, in 5 distinct patches totalling 356 changed lines, between 2025 and 2026.

What is the latest CVE that changed select?

CVE-2026-94113 (Frappe ERPNext before 15.121.0 and 16.34.0 Missing Authorization in Timesheet Endpoints), published 2026-09-20, changed lines 370 to 383 of erpnext/projects/doctype/timesheet/timesheet.py.

How does select compare to the rest of frappe/erpnext?

frappe/erpnext has 22 CVEs with a located fix in total; 11 of them changed select.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

select in frappe/erpnext: Patched by 11 CVEs

Name: select in frappe/erpnext: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

select in frappe/erpnext: Patched by 11 CVEs

CVEs that patched it

Every published CVE whose fix changed select, newest first, with the lines each fix touched.

Frappe ERPNext before 15.121.0 and 16.34.0 Missing Authorization in Timesheet Endpoints
CVE-2026-94113 · erpnext/projects/doctype/timesheet/timesheet.py · lines 370–383 · +13 −3
High · CVSS 7.1
EPSS 0.4%2026-09-20
CVE-2025-52040
CVE-2025-52040 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
High · CVSS 8.2
EPSS 0.3%2025-10-01
CVE-2025-52041
CVE-2025-52041 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
High · CVSS 8.2
EPSS 0.3%2025-10-01
CVE-2025-52042
CVE-2025-52042 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
High · CVSS 8.2
EPSS 0.3%2025-10-01
CVE-2025-52039
CVE-2025-52039 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
High · CVSS 8.2
EPSS 0.3%2025-10-01
CVE-2025-52047
CVE-2025-52047 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
Medium · CVSS 6.5
EPSS 0.3%2025-09-30
CVE-2025-52049
CVE-2025-52049 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
Medium · CVSS 6.5
EPSS 0.3%2025-09-30
CVE-2025-52050
CVE-2025-52050 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
Medium · CVSS 6.5
EPSS 0.3%2025-09-30
CVE-2025-52043
CVE-2025-52043 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
Medium · CVSS 6.5
EPSS 0.3%2025-09-30
CVE-2025-52044
CVE-2025-52044 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 59–81 · +21 −13
High · CVSS 7.5
EPSS 0.4%2025-09-16
ERP: Possibility of SQL injection due to missing validation
CVE-2025-58439 · erpnext/accounts/doctype/loyalty_program/loyalty_program.py · lines 49–71 · +21 −13
Critical · CVSS 9.1
EPSS 0.3%2025-09-06

Get an alert when the next CVE fix lands in frappe/erpnext, with the patched functions.

Monitor erpnext CVEs

select

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track frappe/erpnext CVEs