hillelcoren/invoice-ninja

A source-available invoice, quote, project and time-tracking app built with Laravel

View on Packagist

View on Github

Activity

Latest release: 1w ago
Total releases: 969
Cadence: ~2 days
Last 12 months: 78

Reach

Stars: 10.1k

Details

License: unknown
First release: Mar 19, 2014

Releases

Version	Released
`v5.13.37` patch	Sep 02, 2026
`v5.13.36` patch	Aug 27, 2026
`v5.13.35` patch	Aug 25, 2026
`v5.13.34` patch	Aug 25, 2026
`v5.13.33` patch	Aug 17, 2026
`v5.13.32` patch	Aug 15, 2026
`v5.13.31` patch	Aug 12, 2026
`v5.13.30` patch	Aug 06, 2026
`v5.13.29` patch	Aug 05, 2026
`v5.13.28` patch	Aug 05, 2026
`v5.13.27` patch	Jul 09, 2026
`v5.13.26` patch	Jun 25, 2026
`v5.13.25` patch	Jun 22, 2026
`v5.13.24` patch	Jun 06, 2026
`v5.13.23` patch	Jun 04, 2026
`v5.13.22` patch	May 08, 2026
`v5.13.21` patch	May 03, 2026
`v5.13.20` patch	May 02, 2026
`v5.13.19` patch	Apr 17, 2026
`v5.13.18` patch	Apr 15, 2026
`v5.13.17` patch	Apr 14, 2026
`v5.13.16` patch	Apr 09, 2026
`v5.13.15` patch	Apr 09, 2026
`v5.13.14` patch	Apr 03, 2026
`v5.13.13` patch	Apr 03, 2026
`v5.13.12` patch	Apr 02, 2026
`v5.13.11` patch	Mar 31, 2026
`v5.13.10` patch	Mar 30, 2026
`v5.13.9` patch	Mar 28, 2026
`v5.13.8` patch	Mar 26, 2026
`v5.13.7` patch	Mar 26, 2026
`v5.13.6` patch	Mar 26, 2026
`v5.13.5` patch	Mar 23, 2026
`v5.13.4` patch	Mar 22, 2026
`v5.13.3` patch	Mar 20, 2026
`v5.13.2` patch	Mar 18, 2026
`v5.13.1` patch	Mar 10, 2026
`v5.13.0` minor	Mar 10, 2026
`v5.12.70` patch	Mar 06, 2026
`v5.12.69` patch	Feb 26, 2026
`v5.12.68` patch	Feb 25, 2026
`v5.12.67` patch	Feb 25, 2026
`v5.12.66` patch	Feb 24, 2026
`v5.12.65` patch	Feb 21, 2026
`v5.12.64` patch	Feb 18, 2026
`v5.12.63` patch	Feb 18, 2026
`v5.12.62` patch	Feb 17, 2026
`v5.12.61` patch	Feb 17, 2026
`v5.12.60` patch	Feb 15, 2026
`v5.12.59` patch	Feb 13, 2026

1–50 of 969

Repository

invoiceninja/invoiceninja

Forks: 2.7k
Open issues: 923
Language: PHP
: 3.5/ 10

php
expenses
javascript
invoices
tasks
laravel

Dependencies (81)

Depends on

v5.13.37

Supply-chain exposure

Known CVEs (1)

CVE-2021-3977 GHSA-xg6r-5gx4-qxjm Jan 06, 2022

invoiceninja is vulnerable to Cross-site Scripting

5.4 / 10
Medium
Network Low Low Required Changed Low Low None

invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected versions

v1.0.2v1.0.3v1.1.0v1.1.1v1.1.2v1.2.0v1.2.1v1.2.2v1.3.0v1.3.1v1.3.2v1.3.3

+ 360 more Show less

v1.4.0v1.5.0v1.5.1v1.5.2v1.6.0v1.6.1v1.7.0v1.7.1v1.7.2v2.0.0v2.0.0_RC1v2.0.1v2.1.0v2.1.1v2.1.2v2.2.0v2.2.1v2.2.2v2.3.0v2.3.1v2.3.2v2.3.3v2.3.4v2.4.0v2.4.1v2.4.2v2.4.3v2.4.4v2.4.5v2.4.6v2.4.7v2.4.8v2.4.8.1v2.4.9v2.4.9.1v2.4.9.2v2.4.9.3v2.4.9.4v2.4.9.5v2.4.9.6v2.5.0v2.5.0.1v2.5.0.2v2.5.0.3v2.5.0.4v2.5.1v2.5.1.1v2.5.1.2v2.5.1.3v2.5.2v2.5.2.1v2.5.2.2v2.6v2.6.1v2.6.10v2.6.11v2.6.2v2.6.3v2.6.4v2.6.5v2.6.6v2.6.7v2.6.8v2.6.9v2.7v2.7.1v2.7.2v2.8v2.8.1v2.8.2v2.9.0v2.9.1v2.9.2v2.9.3v2.9.4v2.9.5v3.0.0v3.0.1v3.0.2v3.0.3v3.0.4v3.0.5v3.1.0v3.1.1v3.1.2v3.1.3v3.2.0v3.2.1v3.3.0v3.3.1v3.3.3v3.4.0v3.4.1v3.4.2v3.5.0v3.5.1v3.6.0v3.6.1v3.7.0v3.7.1v3.7.2v3.8.0v3.8.1v3.9.0v3.9.1v3.9.2v4.0.0v4.0.1v4.1.0v4.1.1v4.1.2v4.1.3v4.1.4v4.1.5v4.2.0v4.2.1v4.2.2v4.3.0v4.3.1v4.4.0v4.4.1v4.4.2v4.4.3v4.4.4v4.5.0v4.5.1v4.5.10v4.5.11v4.5.12v4.5.13v4.5.14v4.5.15v4.5.16v4.5.17v4.5.18v4.5.19v4.5.2v4.5.20v4.5.21v4.5.22v4.5.23v4.5.24v4.5.25v4.5.26v4.5.27v4.5.28v4.5.29v4.5.3v4.5.30v4.5.31v4.5.32v4.5.33v4.5.34v4.5.35v4.5.36v4.5.37v4.5.38v4.5.39v4.5.4v4.5.40v4.5.41v4.5.42v4.5.43v4.5.44v4.5.45v4.5.46v4.5.47v4.5.48v4.5.49v4.5.5v4.5.50v4.5.6v4.5.7v4.5.8v4.5.9v5.0v5.0.1v5.0.10v5.0.11v5.0.12v5.0.13v5.0.16v5.0.17v5.0.18v5.0.19v5.0.2v5.0.20v5.0.21v5.0.22v5.0.23v5.0.24v5.0.25v5.0.26v5.0.27v5.0.28v5.0.29v5.0.3v5.0.30v5.0.31v5.0.32v5.0.33v5.0.34v5.0.35v5.0.36v5.0.37v5.0.38v5.0.39v5.0.4v5.0.40v5.0.41v5.0.42v5.0.43v5.0.44v5.0.45v5.0.46v5.0.47v5.0.48v5.0.49v5.0.5v5.0.50v5.0.51v5.0.52v5.0.53v5.0.54v5.0.55v5.0.56v5.0.6v5.0.7v5.0.8v5.0.9v5.1.0v5.1.1v5.1.10v5.1.11v5.1.12v5.1.13v5.1.14v5.1.15v5.1.16v5.1.17v5.1.18v5.1.19v5.1.2v5.1.20v5.1.21v5.1.22v5.1.23v5.1.24v5.1.25v5.1.26v5.1.27v5.1.28v5.1.29v5.1.3v5.1.30v5.1.31v5.1.32v5.1.33v5.1.34v5.1.35v5.1.36v5.1.37v5.1.38v5.1.39v5.1.4v5.1.40v5.1.41v5.1.42v5.1.43v5.1.44v5.1.45v5.1.46v5.1.47v5.1.48v5.1.49v5.1.5v5.1.50v5.1.51v5.1.52v5.1.53v5.1.54v5.1.55v5.1.56v5.1.57v5.1.58v5.1.59v5.1.6v5.1.60v5.1.61v5.1.62v5.1.63v5.1.64v5.1.65v5.1.66v5.1.67v5.1.68v5.1.69v5.1.7v5.1.70v5.1.71v5.1.72v5.1.73v5.1.74v5.1.8v5.1.9v5.2.0v5.2.1v5.2.10v5.2.11v5.2.12v5.2.13v5.2.14v5.2.15v5.2.16v5.2.17v5.2.18v5.2.19v5.2.2v5.2.3v5.2.4v5.2.5v5.2.6v5.2.7v5.2.8v5.2.9v5.3.0v5.3.1v5.3.10v5.3.11v5.3.12v5.3.13v5.3.14v5.3.15v5.3.16v5.3.17v5.3.18v5.3.19v5.3.2v5.3.20v5.3.21v5.3.22v5.3.23v5.3.24v5.3.25v5.3.26v5.3.27v5.3.28v5.3.29v5.3.3v5.3.30v5.3.31v5.3.32v5.3.33v5.3.34v5.3.4v5.3.5v5.3.6v5.3.7v5.3.8v5.3.9

Fixed in

5.3.35

References

https://nvd.nist.gov/vuln/detail/CVE-2021-3977
https://github.com/invoiceninja/invoiceninja/commit/1186eaa82375692d01d5ef3369c5b7bc7315b55f
https://github.com/invoiceninja/invoiceninja
https://github.com/invoiceninja/invoiceninja/releases/tag/v5.3.35
https://huntr.dev/bounties/99c4ed09-b66f-474a-bd74-eeccf9339fde

Updated Nov 08, 2023 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

major 4
minor 43
patch 920
pre 1

969 releases

Dependencies over time

per release

Minimum runtime

over time

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More