invoiceninja vulnerabilities

CVEs whose affected-version data names the invoiceninja package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82029Medium· 6.5

3d ago

Invoice Ninja < 5.13.28 Broken Access Control via Vendor Portal

Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-portal contacts to access documents belonging to other vendors and clients by exploiting authorization checks that validate only…

▾ Sunlitinvoiceninja · invoiceninjaEPSS 0.24%via CVEORG