Login Request a demo
IN
Product
InvoiceShelf
by InvoiceShelf · last CVE Oct 14, 2026
11
CVEs
0
On KEV
8.7
Max CVSS
7
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 9Medium 2Low 0
Severity
All severities11Critical0High9Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add InvoiceShelf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55610
8.7
0%
Sep 23
InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover
Affected: < 2.4.1
CVE-2026-34367
8.7
0%
Mar 31
InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field
Affected: < 2.2.0
CVE-2026-55383
8.2
0%
Oct 14
InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure
Affected: < 2.4.0
CVE-2026-34366
8.1
0%
Mar 31
InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field
Affected: < 2.2.0
CVE-2026-34365
8.1
0%
Mar 31
InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field
Affected: < 2.2.0
CVE-2026-55382
7.6
0%
Oct 14
InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)
Affected: < 2.4.0
CVE-2026-55387
7.2
0%
Oct 14
InvoiceShelf bulk deletion lacks company scoping
Affected: < 2.4.0
CVE-2026-55381
7.1
0%
Oct 14
InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimates
Affected: < 2.4.0
CVE-2026-55386
7.1
0%
Oct 14
InvoiceShelf ORDER BY SQL injection through orderByField
Affected: < 2.4.0
CVE-2026-55385
6.8
1%
Oct 14
InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration
Affected: < 2.4.0
CVE-2026-55384
5.3
0%
Oct 14
InvoiceShelf trusts client-supplied document totals
Affected: < 2.4.0
Showing 11