sprout-invoices vulnerabilities

CVEs whose affected-version data names the sprout-invoices package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-97078Medium· 5.3

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

▾ SunlitBoldGrid · sprout-invoicesvia NVD

sprout-invoices vulnerabilities (CVEs) · VulnSea