Advanced Project Status

Generated on 2026-04-19 02:18:59 in 1132 seconds by apstats

Lines of code

LanguageBytesFilesLinesBlanksCommentsCode (SLOC)
All files without dependencies    
See detail per file type...
90 873 1644 0561 783 421193 700345 6221 244 099
All files of dependencies only    
See detail per file type...
70 223 5483 539830 18573 574165 680590 931
Total161 096 7127 5952 613 606267 274511 3021 835 030

Contributions

Pushes and Commits of Dolibarr/dolibarr Pull Request Size of Dolibarr/dolibarr

Contributors


Thumbs of most active contributors

Dolibarr


Star History of Dolibarr/dolibarr

Project value

COCOMO value
(Basic/Semi-detached model)
$141 713 518
COCOMO effort
(Basic/Semi-detached model)
12 500 months people

Last security issues (last 6 months)

Commit IDDateReported on a
VDP (GHSA, Yogosha...)
Reported on
GitHub issues
Reported on
CVE
TitleBranch of fix
ad9328ec… 2026-04-09#ghsa-crgg-h74r-2m8r#37636FIX #GHSA-crgg-h74r-2m8r (#37636), FIX #GHSA-crgg-h74r-2m8r (#37637), FIX #GHSA-crgg-h74r-2m8r18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
9533677c…2026-04-03#ghsa-prg3-w5r4-h7g3FIX #GHSA-prg3-w5r4-h7g323.0, develop
b18f4ecc… 2026-04-03#ghsa-hq5j-39f9-qxcvFIX #GHSA-hq5j-39f9-qxcv22.0, 23.0, develop
ee8ded7c…2026-03-29#ghsa-5cfw-655w-vqp8Fix #GHSA-5cfw-655w-vqp823.0, develop
7113794c…2026-03-29#ghsa-7mvq-p95c-38fxFix #GHSA-7mvq-p95c-38fx23.0, develop
e263a85f…2026-03-26#ghsa-ph29-326p-chw4FIX #GHSA-ph29-326p-chw4 - disable+sanitize deprecated load/save files23.0, develop
fb251fee… 2026-03-26#ghsa-39vm-9q4p-6jjg#37629FIX #GHSA-39vm-9q4p-6jjg - force disabling module possible on demo only (#37629), FIX #GHSA-39vm-9q4p-6jjg - force disabling module possible on demo only22.0, 23.0, develop
1f1b6bf4… 2026-03-26#ghsa-hh5p-m24x-fwx2#37630FIX #GHSA-hh5p-m24x-fwx2 block ssrf when using webhooks (#37630), FIX #GHSA-hh5p-m24x-fwx2 block ssrf when using webhooks22.0, 23.0, develop
c83c1330… 2026-03-26#ghsa-v5fq-cf5m-vwv7#37632FIX #GHSA-v5fq-cf5m-vwv7 - Credit Grzegorz Tworek, Sec4check (#37632), FIX #GHSA-v5fq-cf5m-vwv7 - Credit Grzegorz Tworek, Sec4check (grzegorz.tworek@sec4check.pl)22.0, 23.0, develop
11244390… 2026-03-26#ghsa-qjj8-wpvx-p54jFIX #GHSA-qjj8-wpvx-p54j - test on hierarchy not done on some api23.0, develop
18aa4442… 2026-03-26#ghsa-5jmx-352f-p5g3NEW use of rich editor is off by default on public page - #GHSA-5jmx-352f-p5g3, NEW Start implementation of MAIN_RESTRICTHTML_ONLY_VALID_HTML=2 for #GHSA-5jmx-352f-p5g3develop
67e35e3f…2026-03-26#ghsa-jc53-p98m-66wvFix #GHSA-jc53-p98m-66wv - SSRF better on servers with ipv6 onlydevelop
6d68a68b…2026-03-26#ghsa-5w4f-94xq-w36fFix #GHSA-5w4f-94xq-w36f - wrapper to download files in public ticket is too opendevelop
f98e60bd… 2026-03-25#ghsa-7hqv-pvw6-cw54FIX #GHSA-7hqv-pvw6-cw5423.0, develop
ea1d3605…2026-03-25#ghsa-3g6r-h9mx-5gg9FIX #GHSA-3g6r-h9mx-5gg9develop
6f425521…2026-03-25#ghsa-vmvw-qq8w-wqhgFIx #GHSA-vmvw-qq8w-wqhg23.0, develop
29c63752…2026-03-25#ghsa-mh66-3w5r-xg9jFix #GHSA-mh66-3w5r-xg9j23.0, develop
40374ec1…2026-03-25#ghsa-8qh8-6h88-q46pFIX #GHSA-8qh8-6h88-q46p23.0, develop
8ab83f3b…2026-03-25#ghsa-3j3p-jjf7-hm9gBackport fix #GHSA-3j3p-jjf7-hm9g22.0, 23.0, develop
d928b816…2026-03-02#ghsa-q29x-7fmx-7gq3Fix #GHSA-q29x-7fmx-7gq323.0, develop
743c22e5…2026-03-02#ghsa-2mfj-r695-5h9rSec: Fix #GHSA-2mfj-r695-5h9r23.0, develop
a8e05083…2026-02-12#37211Sec: Can init a page with php content without permission for php content (#37211)18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
5846921e…2026-02-11Sec: Can init a page with php content without permission for php content edition (reported by phdwg1410)22.0, 23.0, develop
2e7ab21d… 2026-01-13#ghsa-w5j3-8fcr-h87w#36868FIX #GHSA-w5j3-8fcr-h87w (#36868), FIX #GHSA-w5j3-8fcr-h87w18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
4bfda08f…2026-01-07#ghsa-px39-mwcr-hvxpFix #GHSA-px39-mwcr-hvxp23.0, develop
ac4a110c…2025-12-16Sec: Fix Dolibarr Stored XSS via Meta Tag Injection GHSA-59gv-36h7-qwh823.0, develop
a1476fd2…2025-12-03SEC: permissions not checked on other tabs of HRM evaluation card17.0, 18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
908880c8…2025-11-26SEC: fix IDOR attack on employee evaluation. Missing permision test https://github.com/atm-florianm/dolibarr/commit/7ed0af2a138a34e7c7005b95c85ffc791976a6cf17.0, 18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop
3608e9b1…2025-11-26SEC: 7ed0af2a138a34e7c7005b95c85ffc791976a6cf17.0, 18.0, 19.0, 20.0, 21.0, 22.0, 23.0, develop

Note:Search is done in git repository on regex string "#ghsa|#yogosha|CVE[\s\-]*\d|Sec:|Sec |^Sec\s" (not case sensitive)
You can use this URL for RSS notifications: index-security.rss

Technical debt (PHPStan - PHP Static Analysis Tool 1.10.27 - level 9 -> 783 warnings)

FileLineType
htdocs/accountancy/class/bookkeepingtemplate.class.php93PHPDoc type array of property BookkeepingTemplate::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/accountancy/class/bookkeepingtemplateline.class.php92PHPDoc type array of property BookkeepingTemplateLine::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/adherents/class/subscription.class.php103PHPDoc type array of property Subscription::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/asset/class/asset.class.php108PHPDoc type array of property Asset::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/asset/class/assetdepreciationoptions.class.php72PHPDoc type array of property AssetDepreciationOptions::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/asset/class/assetmodel.class.php94PHPDoc type array of property AssetModel::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/bom/class/bom.class.php110PHPDoc type array of property BOM::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/bom/class/bom.class.php1566Method BOM::getNetNeedsTree() has parameter $TNetNeeds with no value type specified in iterable type array.
htdocs/bom/class/bomline.class.php85PHPDoc type array of property BOMLine::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/bookcal/booking_list.php132Variable $lineid might not be defined.
htdocs/bookcal/class/availabilities.class.php110PHPDoc type array of property Availabilities::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/bookcal/class/calendar.class.php110PHPDoc type array of property Calendar::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/categories/card.php222Variable $result might not be defined.
htdocs/comm/action/class/actioncommreminder.class.php83PHPDoc type array of property ActionCommReminder::$fields is not covariant with PHPDoc type array of overridden property CommonObject::$fields.
htdocs/comm/action/index.php1649Parameter #16 $usergroupid of function print_actions_filter expects array|int, string given.
htdocs/comm/action/index.php1760Parameter #16 $usergroupid of function print_actions_filter expects array|int, string given.
htdocs/comm/action/index.php1828Parameter #16 $usergroupid of function print_actions_filter expects array|int, string given.
htdocs/comm/action/pertype.php498Variable $num might not be defined.
htdocs/comm/action/peruser.php1828Variable $labelbytype might not be defined.
htdocs/comm/contact.php155Variable $label might not be defined.

Technical debt (Phan 5.4.3 -> 597 warnings)

FileLineDetail
htdocs/comm/action/index.php1472TypeError PhanTypeMismatchProperty Assigning ($userId as a field) of type array to property but \ActionComm->userassigned is array
htdocs/comm/action/pertype.php1054TypeError PhanTypeExpectedObjectPropAccess Expected an object instance when accessing an instance property, but saw an expression $username with type string
htdocs/comm/action/pertype.php1324TypeError PhanTypeExpectedObjectPropAccess Expected an object instance when accessing an instance property, but saw an expression $username with type string
htdocs/comm/action/pertype.php1326TypeError PhanTypeExpectedObjectPropAccess Expected an object instance when accessing an instance property, but saw an expression $username with type string
htdocs/comm/action/peruser.php1065TypeError PhanTypeMismatchArgument Argument 1 ($string) is $event->datep of type int|non-zero-int but \DoliDB::jdate() takes ?string defined at htdocs/core/db/DoliDB.class.php:399
htdocs/comm/action/peruser.php1066TypeError PhanTypeMismatchArgument Argument 1 ($string) is $event->datef of type int|non-zero-int but \DoliDB::jdate() takes ?string defined at htdocs/core/db/DoliDB.class.php:399
htdocs/comm/mailing/index.php121UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->require_module
htdocs/comm/mailing/index.php122UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->require_admin
htdocs/comm/mailing/index.php141UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->picto
htdocs/comm/mailing/targetemailing.php584UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->require_module
htdocs/comm/mailing/targetemailing.php585UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->require_admin
htdocs/comm/mailing/targetemailing.php604UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->picto
htdocs/comm/mailing/targetemailing.php605UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->picto
htdocs/comm/mailing/targetemailing.php607UndefError PhanUndeclaredProperty Reference to undeclared property \MailingTargets->picto
htdocs/comm/propal/list.php1884UndefError PhanUndeclaredProperty Reference to undeclared property \CommonInvoice->facid
htdocs/commande/class/commande.class.php1524UndefError PhanUndeclaredProperty Reference to undeclared property \Propal->other_linked_objects
htdocs/commande/class/commande.class.php1525UndefError PhanUndeclaredProperty Reference to undeclared property \Propal->other_linked_objects
htdocs/commande/list.php850UndefError PhanUndeclaredProperty Reference to undeclared property \Commande->fk_warehouse
htdocs/commande/list_det.php2142TypeError PhanTypeInvalidDimOffset Invalid offset $obj->fk_product of $productstat_cachevirtual of array type array{}
htdocs/commande/list_det.php2167TypeError PhanTypeInvalidDimOffset Invalid offset "stats_order_customer" of $productstat_cache[$obj->fk_product] of array type array{stock_reel:float|int}