CVE-2026-41317 - Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation

CVE ID :CVE-2026-41317 Published : April 24, 2026, 3:16 a.m. | 36 minutes ago Description :Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS).`press.api.account.create_api_secret` is prone to CSRF-like exploits