crm
v16.0.3Fully featured, open source CRM
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- AGPL-3.0Copyleft · OSI-approved
- Security
- 9 advisories4 high, 5 medium
- Supported versions
- No scheduleendoflife.date does not track this project
4k stars · 1.6k forks · 319 open issues · last release 3 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 9 most recent advisories published by the maintainers: 4 high, 5 medium. Check the patched version against the one you run.
- mediumGHSA-5wcf-p378-fmwrSep 24, 2026Unauthorised disclosure of personal information due to missing validation
- Affected
- <= 1.82.0
- mediumGHSA-4rjw-6mxx-m345Sep 8, 2026Unauthorised access to data due to missing validation
- Affected
- < 1.81.2
- Patched in
- 1.81.2
- mediumGHSA-843p-qp2f-p2v8Sep 8, 2026Unauthorised modification of records due to missing validation
- Affected
- < 1.74.0
- Patched in
- 1.74.0
- highCVE-2026-53761Jun 2, 2026Authentication Bypass via Logged Invitation Keys in crm/api
- Affected
- <v1.72.1
- Patched in
- v1.73.0
- mediumCVE-2026-104145May 18, 2026SQL Injection vulnerability in document-linking functionality
- Affected
- <1.69.2
- Patched in
- 1.69.2
- highGHSA-wg3q-hf3h-58rcMar 10, 2026Authorization and Privilege Escalation Issues in Frappe CRM APIs
- Affected
- <1.58.3
- Patched in
- 1.58.3
- highGHSA-hfgw-j396-96v6Mar 10, 2026Missing Authorization Checks on View Settings and Document Operations
- Affected
- <1.60.0
- Patched in
- 1.60.0
- highGHSA-v845-c2wq-jwg5Mar 10, 2026Overly Permissive "All" Role Permissions
- Affected
- <1.58.3
- Patched in
- v1.58.3
- mediumCVE-2025-68928Dec 29, 2025Authenticated XSS via website field
- Affected
- <1.56.2
- Patched in
- 1.56.2