Threats affecting pkg:github/invoiceshelf/InvoiceShelf

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-122158InvoiceShelf · Improper Access Controls Medium5.12026-11-05CVE Database V5CVE-2026-122158 CVE-2026-122158 is a medium severity vulnerability in InvoiceShelf versions up to 2.4.3 and 3.0.0-alpha.3. It involves improper access controls in the MemberService::create function, allowing remote attackers to manipulate company ID and role parameters. Public exploit code is available. Upgrading to versions 2.4.4 or 3.0.0-alpha.4 resolves the issue. Vulnerability	CVE Database V5	2026-11-05

Page 1 of 1 · 1 duplicate CVE record merged