GHSA-qv4m-m73m-8hj7

High

GHSA-qv4m-m73m-8hj7

Published Jul 10, 2026

CVSS

8.8

HIGH

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.

—

Affected packages

Summary

NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)

Developer impact

Recommended action

Affected packages

Sources