CVE-2026-55383 - InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure
CVE ID :CVE-2026-55383 Published : Oct. 14, 2026, 8:17 p.m. | 1 hour, 15 minutes ago Description :InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice,...