Search for packages
| purl | pkg:composer/snipe/snipe-it@8.6.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-4075
|
snipe-it is vulnerable to Server-Side Request Forgery (SSRF) | There are no reported fixed by versions. |
|
GHSA-r9r3-g9fp-3q4q
Aliases: CVE-2026-55703 |
Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET ### Impact Any activated account in a company can read every … |
Vulnerable |
|
GHSA-3hgv-jr5j-cg9x
Aliases: CVE-2026-55694 |
Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover ### Impact An attacker can completely bypass file-name … |
Vulnerable |
|
GHSA-c6w2-j4wq-mvwg
Aliases: CVE-2026-55643 |
Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode ### Impact Due to inconsistent authorization checks, a company-scoped user can bypass … |
Vulnerable Vulnerable |
|
GHSA-396x-xmvh-p563
Aliases: CVE-2026-63498 |
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API Snipe-IT's uploaded-files API accepts XML documents and later … |
Vulnerable |
|
GHSA-hxcx-9h4f-42xx
Aliases: CVE-2026-63493 |
Snipe-IT: 2FA bypass via the API token flow ### Impact An attacker who knows a victim's password fully bypasses that … |
Vulnerable |
|
GHSA-p9h3-gvpq-5539
Aliases: CVE-2026-62368 |
Snipe-IT: Stored XSS via Custom Field name in asset-list column headers ### Impact A user with the "customfields.create" permission can … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-pwpj-p52h-q484
|
Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection ### Impact A cross-tenant data injection vulnerability was identified in the Snipe-IT Accessories … |
CVE-2026-54329
|
|
GHSA-575r-357h-fhch
|
Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update ### Impact The API endpoint for updating asset maintenance records … |
CVE-2026-55516
|
|
GHSA-jhph-5q74-pmfx
|
Snipe-IT vulnerable to stored XSS via inline-served attachment ### Impact A low-privilege user can store an active-content payload as an … |
CVE-2026-55466
|
|
GHSA-r52f-r9v5-66xr
|
Snipe-IT vulnerable to stored XSS via Markdown custom field ### Impact CommonMark is configured with `html_input => 'escape'`, which blocks … |
CVE-2026-55464
|
|
GHSA-whrx-mmgr-gpcf
|
Snipe-IT has CSV formula injection in Activity Report export ### Impact In Snipe-IT v8.6.1 and lower, `Actionlog::logaction()` stores the request … |
CVE-2026-55452
|
|
GHSA-35cr-9hqq-p2mg
|
Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint ### Impact A user with the `reports.view` permission can … |
CVE-2026-55515
|
|
GHSA-c8qc-wf67-342w
|
Snipe-IT: Stored DOM XSS via table selected-count IDs ### Impact The table component derives data-selected-count-id from the component $name value. … |
CVE-2026-61807
|
|
GHSA-crv3-j83j-f3r6
|
Snipe-IT has missing object-level authorization in Kits API ### Impact The API endpoint for adding a license to a predefined … |
CVE-2026-55478
|
|
GHSA-vgx7-c78r-69w9
|
Snipe-IT has an authorization bypass on bulk editing users ### Impact An authenticated non-admin user with `users.view` and `users.edit`, but … |
CVE-2026-55460
|
|
GHSA-xr9m-gphc-9p63
|
Snipe-IT has a path traversal vulnerability via CSV import `image` field ### Impact An authenticated user holding the `import` and … |
CVE-2026-55469
|
|
GHSA-wg2f-x2c2-c4rp
|
Snipe-IT has an Open Redirect After User Edit ### Impact The user edit flow stores `url()->previous()` into Laravel's intended URL … |
CVE-2026-55461
|
|
GHSA-8w8c-8mx9-52cw
|
Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation ### Impact When Full Multiple Companies Support and scope_locations_fmcs are … |
CVE-2026-55472
|
|
GHSA-8frh-vhgh-64cf
|
Snipe-IT has incorrect permission for legacy license checkin API ### Impact The legacy single-seat license checkin flow authorizes the action … |
CVE-2026-55479
|
|
GHSA-w7qw-5wfv-gwx9
|
Snipe-IT has CSS Injection via `header_color` Setting ### Impact Because `default.blade.php` is the base layout loaded on every authenticated page, … |
CVE-2026-55481
|