inventree — Vulnerabilities & Security Advisories 21

Inventree serves as an open-source inventory management system designed for tracking parts, assemblies, and stock levels. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting attacks, and privilege escalation flaws, with 15 CVEs documented to date. Notable security characteristics include its Python/Django architecture and reliance on third-party libraries. While no major public security incidents have been widely reported, the consistent discovery of RCE vulnerabilities in earlier versions highlights potential risks for organizations deploying the system without applying security patches.