~ / search / GHSA-c9wp-pr7f-hfqm

GHSA-c9wp-pr7f-hfqm

Snipe-IT allows XSS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-59712

Packages

EcosystemPackageAffectedFixed in
Packagist snipe/snipe-it < 8.1.18 8.1.18

Details

As written in the advisory (Markdown source, shown as plain text).

Snipe-IT before 8.1.18 allows XSS.

References

External links from the advisory. They lead to third-party sites.