Executive brief
Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7.
Junglewise Threat Intelligence
CVE-2025-64227: Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This
CVE-2025-64227 · Severity: critical · CVSS 9.8 · Published 2025-12-18