Invoice Ninja Invoice Ninja
2 CVEs affecting Invoice Ninja Invoice Ninja. Latest disclosed: 2025-08-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0474 | High | 7.7 | 2025-01-14 | Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the applicati… |
CVE-2025-8700 | | 2025-08-26 | Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged… |