inventree vulnerabilities and fixes

Recent CVEs affecting inventree, with upgrade or downgrade steps. 7 tracked.

inventree has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-04-08. Highest priority: CVE-2026-35478 (score 35/100).

• CVE-2026-33530 HIGH 7.7 UPGRADE InvenTree is an Open Source Inventory Management System
• CVE-2026-33531 MEDIUM 6.5 UPGRADE InvenTree is an Open Source Inventory Management System
• CVE-2026-35478 HIGH 8.3 UPGRADE InvenTree is an Open Source Inventory Management System
• CVE-2026-35476 HIGH 7.2 UPGRADE InvenTree is an Open Source Inventory Management System
• CVE-2026-39362 HIGH 7.1 UPGRADE InvenTree is an Open Source Inventory Management System
• CVE-2026-35479 MEDIUM 6.6 UPGRADE InvenTree is an Open Source Inventory Management System
• CVE-2026-35477 MEDIUM 5.5 UPGRADE InvenTree is an Open Source Inventory Management System

FAQ

How do I fix inventree vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is inventree being exploited right now?

None of the tracked inventree CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which inventree CVE should I patch first?

CVE-2026-35478 currently ranks highest (35/100): InvenTree is an Open Source Inventory Management System.

RSS feed for inventree · ← Back to latest CVEs