pravel vulnerabilities
3 published CVEs name pravel among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 3Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-12415
Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter
pravel · Invoice Generator
Critical9.8 - CVE-2026-12416
Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter
pravel · Invoice Generator
Critical9.8 - CVE-2026-12417
SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover
pravel · SignUp & SignIn
Critical9.8