invoiceninja Latest Vulnerabilities

Latest vulnerabilities published by invoiceninja

JSON RSS CSV 🔔 Create Alert Trigger

1 September 2026

Server-Side Request Forgery Vulnerability in Invoice Ninja by Invoice Ninja
CVE-2026-83744
InvoiceninjaInvoice Ninja👾🟡5.3MEDIUM
Authorization Bypass in Invoice Ninja Vendor Portal Profile Update by Invoice Ninja
CVE-2026-83743
InvoiceninjaInvoice Ninja👾🟡5.3MEDIUM

5 August 2026

Cross-Site Scripting Vulnerability in InvoiceNinja by Invoice Ninja
CVE-2026-71233
InvoiceninjaInvoiceninja8.7HIGH

30 June 2026

Open Redirect Vulnerability in Invoice Ninja Affected by External URL Manipulation
CVE-2026-58450
InvoiceninjaInvoiceninja👾🟡5.3MEDIUM

26 March 2026

7 January 2026

Server-Side Request Forgery in InvoiceNinja's Migration Import Component
CVE-2026-0649
InvoiceNinjaInvoiceninja👾🟡5.1MEDIUM

24 December 2021

Cross-site Scripting (XSS) - Stored in invoiceninja/invoiceninja
CVE-2021-3977
InvoiceninjaInvoiceninja/invoiceninja6.5MEDIUM

6 June 2021

Remote Code Execution Vulnerability in Invoice Ninja by Invoice Ninja
CVE-2021-33898
InvoiceninjaInvoice Ninja8.1HIGH

3 January 2018

Stored Cross-Site Scripting Vulnerability in Invoice Ninja by Invoice Ninja
CVE-2017-1000466
InvoiceninjaInvoice Ninja5.4MEDIUM