| Package | Affected versions | Patched versions |
|---|---|---|
| erpnext | < 16.9.1 | 16.9.1 |
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.1, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyond their permitted role. This vulnerability is fixed in 16.9.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free