All vulnerabilities

Servers and applications

GHSA-wqfr-w9hp-c7v6

Webhook testing endpoint allows port-scanning of internal services

Severity
Medium 5.5
Published
6 Oct 2026
Last changed
6 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
8.7.0
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Snipe-ITServers and applications · github:grokability/snipe-it
  • Every version before 8.7.0

References