Skip to content
OpenAdvisories

Package · PyPI

inventree

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    GHSA-vx3h-qwqw-r2wq

    Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP

    ### Impact The "download image from remote URL" feature can be abused by a malicious actor to potentially extract information about server side resources. Submitting a crafted URL (in place of a valid image) can raise a server side error, which is reported ba…

    inventree PyPI
  • Medium —
    GHSA-7rq4-qcpw-74gq

    Formula Injection in Exported Data

    ### Impact Datasets exported to file (e.g. CSV / XLS) are not sufficiently sanitized, to neutralize potential formula injection ### Patches - The issue is addressed in the upcoming 0.8.0 release - This fix will also be back-ported to the 0.7.x branch, applied…

    inventree PyPI