Skip to content
OpenAdvisories

Vendor

InvoiceShelf

11 known vulnerabilities.

Products

InvoiceShelf 11
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-55385

    InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration

    InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberg_host setting only a…

    InvoiceShelf InvoiceShelf
  • Medium 5.3
    CVE-2026-55384

    InvoiceShelf trusts client-supplied document totals

    InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf invoice, estimate, and recurring-invoice creation paths accept client-supplied total, sub_…

    InvoiceShelf InvoiceShelf