~ / search / GHSA-phwj-fgch-xvrj

GHSA-phwj-fgch-xvrj

Snipe-IT allows unsafe deserialization

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-59713

Packages

EcosystemPackageAffectedFixed in
Packagist snipe/snipe-it < 8.1.18 8.1.18

Details

As written in the advisory (Markdown source, shown as plain text).

Snipe-IT before 8.1.18 allows unsafe deserialization.

References

External links from the advisory. They lead to third-party sites.