Related VulnerabilitiesPoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path TraversalPoCfrappe-default-login: Frappe Framework - Default Login CredentialsPoCCVE-2025-41242: Spring Framework - Path TraversalPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksFrappe /api/method/frappe.desk.doctype.tag.tag.add_tags SQL 注入漏洞(CVE-2025-52048)Frappe /api/method/frappe.automation.doctype.auto_repeat.auto_repeat.generate_message_preview SQL 注入漏洞(CVE-2025-68929)Frappe /files 目录遍历漏洞(CVE-2025-68953)Serverless Framework 未授权 命令注入漏洞Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞(CVE-2025-58179)