Skip to content
OpenAdvisories

Package · PyPI

inventree

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2022-3355

    Cross-site Scripting (XSS) - Stored in inventree/inventree

    Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.8.3.

    inventree inventree/inventree inventree PyPI
  • High —
    GHSA-85q9-7467-r53q

    XSS Vulnerability in Markdown Editor

    ### Impact InvenTree uses [EasyMDE](https://github.com/Ionaru/easy-markdown-editor) for displaying markdown text in various places (e.g. for the various "notes" fields associated with various models). By default, EasyMDE does not sanitize input data, and it i…

    inventree PyPI
  • High —
    GHSA-rm89-9g65-4ffr

    Insufficient HTML Sanitization

    ### Impact Affected versions can have malicious javascript code injected into the users browser by other authenticated users, as data fields retrieved from the database are not properly sanitized before displaying in various front-end views. The problem here …

    inventree PyPI