PatchTheCVEinventree project vulnerabilities
Recent CVEs affecting inventree project products. 7 tracked.
inventree project has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-04-08. Highest priority: CVE-2026-35478 (score 35/100).
- CVE-2026-33530 HIGH 7.7 UPGRADE InvenTree is an Open Source Inventory Management System
- CVE-2026-33531 MEDIUM 6.5 UPGRADE InvenTree is an Open Source Inventory Management System
- CVE-2026-35478 HIGH 8.3 UPGRADE InvenTree is an Open Source Inventory Management System
- CVE-2026-35476 HIGH 7.2 UPGRADE InvenTree is an Open Source Inventory Management System
- CVE-2026-39362 HIGH 7.1 UPGRADE InvenTree is an Open Source Inventory Management System
- CVE-2026-35479 MEDIUM 6.6 UPGRADE InvenTree is an Open Source Inventory Management System
- CVE-2026-35477 MEDIUM 5.5 UPGRADE InvenTree is an Open Source Inventory Management System
FAQ
How do I fix inventree project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is inventree project being exploited right now?
None of the tracked inventree project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which inventree project CVE should I patch first?
CVE-2026-35478 currently ranks highest (35/100): InvenTree is an Open Source Inventory Management System.