Cpe:2.3:a:frappe:frappe_builder:*:*:*:*:*:*:*:*

Frappe Builder versions before 1.36.1 contain an SSRF vulnerability in the convert_to_webp endpoint, allowing authenticated users to probe internal infrastructure or exfiltrate sensitive data.