All vulnerabilities

Servers and applications

GHSA-wx48-r3qh-jvh5

LDAP StartTLS return value discarded, silent plaintext bind on downgrade

Severity
Medium
Published
8 Oct 2026
Last changed
8 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
8.6.3
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Snipe-ITServers and applications · github:grokability/snipe-it
  • Every version before 8.6.3

References