Munshi vulnerabilities and CVEs

Known vulnerabilities affecting Munshi, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

6 vulnerabilities tracked.

8.8 Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability… CVE-2026-119736 2 Nov 2026
8.7 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST… CVE-2026-119731 2 Nov 2026
7.2 Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow at DELETE… CVE-2026-119733 2 Nov 2026
7.1 Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows authenticated attackers to… CVE-2026-119734 2 Nov 2026
7.1 Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated sub-users to… CVE-2026-119732 2 Nov 2026
5.1 Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject… CVE-2026-119735 2 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Munshi is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Munshi vulnerabilities and CVEs

What this covers

Other products tracked here