Login Request a demo
IN
Product
Invoice Ninja
by invoiceninja · last CVE Sep 1, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Invoice Ninja to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-33898
8.1
2%
Jun 6
In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php that may allow an attacker to deserialize arbitrary PHP…
Affected: before 4.4.0
CVE-2026-29925
7.7
0%
Mar 30
Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php
Affected: 5.12.46; 5.12.48
Showing 2