MEDIUM5.4PyPI
GHSA-62g7-fpv9-v95f· CVE-2022-3355, PYSEC-2026-823Inventree vulnerable to Stored Cross-site Scripting
Modified: 7/7/2026
package
PyPI/inventree
pkg:pypi/inventree
MEDIUMPyPI
GHSA-7rq4-qcpw-74gqFormula Injection in Exported Data
Modified: 12/8/2024
HIGHPyPI
GHSA-85q9-7467-r53qXSS Vulnerability in Markdown Editor
Modified: 5/5/2026
HIGH8.8PyPI
GHSA-9hx5-jmxv-x44q· CVE-2022-2112, PYSEC-2026-824CSV Injection in inventree
Modified: 7/7/2026
HIGH8.8PyPI
GHSA-fr2w-mp56-g4xp· CVE-2022-2111, PYSEC-2026-825Unrestricted Attachment Upload
Modified: 7/7/2026
HIGHPyPI
GHSA-rm89-9g65-4ffrInsufficient HTML Sanitization
Modified: 12/8/2024
MEDIUM4.3PyPI
GHSA-vx3h-qwqw-r2wqInventree Server-Side Request Forgery vulnerability exposes server port/internal IP
Modified: 12/2/2024
MEDIUM5.4PyPI
PYSEC-2026-823· CVE-2022-3355, GHSA-62g7-fpv9-v95fInventree vulnerable to Stored Cross-site Scripting
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-824· CVE-2022-2112, GHSA-9hx5-jmxv-x44qCSV Injection in inventree
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-825· CVE-2022-2111, GHSA-fr2w-mp56-g4xpUnrestricted Attachment Upload
Modified: 7/7/2026