All vulnerabilities

Servers and applications

GHSA-5hmv-jc73-vf84

created_by mass-assignment on Category, Company, License API endpoints (audit-trail spoofing)

Severity
Low
Published
8 Oct 2026
Last changed
8 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
8.6.3
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Snipe-ITServers and applications · github:grokability/snipe-it
  • Every version before 8.6.3

References