agentprime: inventreeEvery new CVE for inventree.https://agentprime.io/CVE-2026-61748: InvenTree: Report/Label print endpoints ignore per-model permissionshttps://agentprime.io/advisories/CVE-2026-61748/https://agentprime.io/advisories/CVE-2026-61748/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:47:14 GMTCVECVE-2026-61746: InvenTree: Plugin-settings GET endpoints are readable without authenticationhttps://agentprime.io/advisories/CVE-2026-61746/https://agentprime.io/advisories/CVE-2026-61746/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:46:25 GMTCVECVE-2026-61744: InvenTree: Barcode-scan API (`POST /api/barcode/`) returns full serialized object data without enforcing the model's view rolehttps://agentprime.io/advisories/CVE-2026-61744/https://agentprime.io/advisories/CVE-2026-61744/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:45:38 GMTCVECVE-2026-61747: InvenTree: Authenticated IDOR in the data-import API exposes other users' imported rows (`row_data`/`data`) and column mappingshttps://agentprime.io/advisories/CVE-2026-61747/https://agentprime.io/advisories/CVE-2026-61747/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:44:15 GMTCVECVE-2026-61749: InvenTree: Administrative staff users can trigger Arbitrary File Read leading to Credential Disclosurehttps://agentprime.io/advisories/CVE-2026-61749/https://agentprime.io/advisories/CVE-2026-61749/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:31:54 GMTCVECVE-2026-61745: InvenTree: Missing authorization on machine restart endpoint allows any authenticated user to interrupt production equipmenthttps://agentprime.io/advisories/CVE-2026-61745/https://agentprime.io/advisories/CVE-2026-61745/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:52:39 GMTCVECVE-2026-39362: InvenTree has SSRF via Remote Image Download — No IP/Hostname Validation on remote_image URLshttps://agentprime.io/advisories/CVE-2026-39362/https://agentprime.io/advisories/CVE-2026-39362/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 19:32:46 GMTCVECVE-2026-35479: InvenTree Plugin Installation - Insufficient Permissionshttps://agentprime.io/advisories/CVE-2026-35479/https://agentprime.io/advisories/CVE-2026-35479/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 19:27:57 GMTCVECVE-2026-35476: InvenTree Affected by Privilege Escalation via APIhttps://agentprime.io/advisories/CVE-2026-35476/https://agentprime.io/advisories/CVE-2026-35476/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 19:26:12 GMTCVECVE-2026-35478: InvenTree has Arbitrary API Token Creationhttps://agentprime.io/advisories/CVE-2026-35478/https://agentprime.io/advisories/CVE-2026-35478/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 19:24:05 GMTCVECVE-2026-35477: InvenTree has SSTI in PART_NAME_FORMAT bypasses CVE-2026-27629 fix via {% if part.pk %} sandbox escapehttps://agentprime.io/advisories/CVE-2026-35477/https://agentprime.io/advisories/CVE-2026-35477/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 19:20:58 GMTCVECVE-2026-33531: InvenTree has Path Traversal In Report Templateshttps://agentprime.io/advisories/CVE-2026-33531/https://agentprime.io/advisories/CVE-2026-33531/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:40:50 GMTCVECVE-2026-33530: InvenTree Vulnerable to ORM Filter Injectionhttps://agentprime.io/advisories/CVE-2026-33530/https://agentprime.io/advisories/CVE-2026-33530/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:34:51 GMTCVECVE-2026-27629: InvenTree Vulnerable to Server Side Template Injection (SSTI)https://agentprime.io/advisories/CVE-2026-27629/https://agentprime.io/advisories/CVE-2026-27629/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 02:48:41 GMTCVECVE-2025-49000: InvenTree has uncontrolled memory allocation via built-in label-sheet pluginhttps://agentprime.io/advisories/CVE-2025-49000/https://agentprime.io/advisories/CVE-2025-49000/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Jun 2025 20:54:27 GMTCVECVE-2024-47610: Stored Cross-site Scripting Vulnerability in Markdown Editorhttps://agentprime.io/advisories/CVE-2024-47610/https://agentprime.io/advisories/CVE-2024-47610/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Oct 2024 20:45:20 GMTCVE