PyPI: inventree

CVE-2022-2113

Safety vulnerability ID: SFTY-20220617-97130

Safety legacy ID: pyup.io-62507

Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.

PythonPyPINVDNVDGitHubGHSA
Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Insufficient HTML Sanitization

Advisory

Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.7.2.

Affected Package

Affecting inventree package, versions<0.7.2

Also affects

---

How to Fix

Upgradeinventreeto0.7.2or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more