Skip to content
OpenAdvisories

Vendor

vas3k

5 known vulnerabilities.

Products

TaxHacker 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-94039

    vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery

    A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PDF Renderer. Performing a manipulation of the argument businessLogo results in server-side…

    vas3k TaxHacker
  • High 7.3
    CVE-2026-78062

    vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials

    A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTER_AUTH_SECRET leads to hard-coded credenti…

    vas3k TaxHacker