How many CVEs have a located fix in Roskus/prospero-flow-crm?

19 published CVEs have a fix traced to functions in Roskus/prospero-flow-crm, touching 105 functions across 121 files.

Which function in Roskus/prospero-flow-crm has been patched by the most CVEs?

save in app/Http/Controllers/Transaction/TransactionSaveController.php has been changed by 2 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in Roskus/prospero-flow-crm?

The median fix changes 42 lines. 32% of fixes change 20 lines or fewer, and 5% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

#281 of 500 repositories

Roskus/prospero-flow-crm

Name: Roskus/prospero-flow-crm: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 4, 2026

19

CVE fixes located

Published CVEs

105

Functions patched

Distinct function sites

121

Files patched

Distinct source files

2026

Years covered

By CVE publication date

Overview

19 published CVEs have a fix traced to functions in Roskus/prospero-flow-crm, the earliest published in 2026. Those fixes changed 105 distinct functions across 121 files, in 355 patch hunks.

Among the 500 repositories tracked here, Roskus/prospero-flow-crm ranks #281 by the number of CVEs with a located fix.

Most patched functions

Functions in Roskus/prospero-flow-crm changed by the most CVE fixes.

Most patched files

Files in Roskus/prospero-flow-crm changed by the most CVE fixes.

1version.php14 CVEs · 0 functions
2app/Http/Requests/EmailRequest.php2 CVEs · 3 functions
3app/Http/Controllers/Company/CompanySaveController.php2 CVEs · 2 functions
4app/Http/Requests/TransactionSaveRequest.php2 CVEs · 2 functions
5app/Http/Controllers/Payroll/PayrollIndexController.php2 CVEs · 1 functions
6app/Http/Controllers/Profile/ProfileSaveController.php2 CVEs · 1 functions
7app/Http/Controllers/Transaction/TransactionSaveController.php2 CVEs · 1 functions
8database/seeders/PermissionSeeder.php2 CVEs · 1 functions
9app/Http/Controllers/Api/Order/OrderItemDeleteController.php1 CVEs · 2 functions
10app/Http/Controllers/Api/Order/OrderItemReadController.php1 CVEs · 2 functions

Fix size

How much code a CVE fix in Roskus/prospero-flow-crm changes, with backports counted once.

42

Median lines changed

Added plus removed, per CVE

32%

Fixes of 20 lines or fewer

Share of CVE fixes

5%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in Roskus/prospero-flow-crm, and the functions each fix changed.

CSRF in Prospero Flow CRM order confirmation allows unauthorized order state changes
CVE-2026-82911
Medium · CVSS 5.1
EPSS 0.2%2026-09-04
Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting
CVE-2026-81931ExtensionMatchesContent SecurityLogger rules
Medium · CVSS 4.8
EPSS 0.5%2026-08-27
IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification
CVE-2026-78365authorize update SupplierUpdateController
Critical · CVSS 9.3
EPSS 0.5%2026-08-24
Unrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVG
CVE-2026-78337CompanySaveRequest ValidateSafeSvg __construct
Medium · CVSS 4.8
EPSS 0.4%2026-08-24
Unvalidated bank account and card foreign keys in the Prospero Flow CRM transaction save endpoint allow cross-tenant disclosure of banking identifiers
CVE-2026-77780exists save TransactionSaveRequest
Medium · CVSS 5.3
EPSS 0.4%2026-08-21
IDOR and missing authorization in the Prospero Flow CRM transaction API allow cross-tenant reading of financial records
CVE-2026-77759TransactionReadRequest read TransactionReadController
High · CVSS 8.7
EPSS 0.5%2026-08-21
Use of hard-coded credentials in Prospero Flow CRM employee onboarding
CVE-2026-19871extends PasswordChangeController PasswordChangeRequest
Critical · CVSS 9.3
EPSS 0.5%2026-08-14
IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation
CVE-2026-19870index PayrollRequest rules
High · CVSS 8.6
EPSS 0.4%2026-08-14
IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking
CVE-2026-19734ProductUpdateController ProductCreateController save
High · CVSS 8.6
EPSS 0.6%2026-08-13
IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and deletion
CVE-2026-19539permissions delete save
High · CVSS 8.6
EPSS 0.4%2026-08-11
Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export
CVE-2026-19433export save
High · CVSS 8.6
EPSS 0.4%2026-08-10
Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation
CVE-2026-59233PermissionSaveRequest save EmailRequest
High · CVSS 8.7
EPSS 0.4%2026-08-10

Get an alert for each new Roskus/prospero-flow-crm CVE, with the patched functions and AI-written analysis.

Monitor prospero-flow-crm CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

1Panel-dev/MaxKB19 CVEs alextselegidis/easyappointments19 CVEs baserproject/basercms19 CVEs bookstackapp/bookstack19 CVEs cloudfoundry/uaa19 CVEs debian/dovecot19 CVEs debian/nginx19 CVEs debian/openimageio19 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in Roskus/prospero-flow-crm.

How many CVEs have a located fix in Roskus/prospero-flow-crm?: 19 published CVEs have a fix traced to functions in Roskus/prospero-flow-crm, touching 105 functions across 121 files.
Which function in Roskus/prospero-flow-crm has been patched by the most CVEs?: save in app/Http/Controllers/Transaction/TransactionSaveController.php has been changed by 2 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in Roskus/prospero-flow-crm?: The median fix changes 42 lines. 32% of fixes change 20 lines or fewer, and 5% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track Roskus/prospero-flow-crm CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing