Vulnerabilities

TI-2026-26653 CVE-2026-34367

InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field

HIGH 71

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00272 Published 2026-03-31 Fixed in 2.2.0 CWE-918

TI-2026-26652 CVE-2026-34366

HIGH 68

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-03-31 Fixed in 2.2.0 CWE-918

TI-2026-26651 CVE-2026-34365

HIGH 68

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-03-31 Fixed in 2.2.0 CWE-918