Security: grokability/snipe-it
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Activation check missing from API middlewareGHSA-cj4w-vx6j-42rf published
Aug 24, 2026 by snipeHigh -
Importer allows cross-user CSV preview disclosureGHSA-89q3-jmfm-hvcm published
Aug 24, 2026 by snipeLow -
Assigned Items Permission BypassGHSA-v973-fm42-f8xv published
Aug 24, 2026 by snipeModerate -
Checkout Authorisation and Custody Workflow Bypass via Asset Update EndpointGHSA-6g2g-83pc-6365 published
Aug 24, 2026 by snipeModerate -
Consumable Inventory Over-allocation Through Concurrent Checkout RequestsGHSA-x4g2-87xc-m5jm published
Aug 24, 2026 by snipeModerate -
FMCS Bypass on Requested-Assets Listing (Cross-Company Read)GHSA-fxm8-w79r-g7wr published
Aug 24, 2026 by snipeModerate -
FMCS Bypass on Checkout-Acceptance Report Actions (Cross-Company Delete + Reminder Send)GHSA-jqgw-vpjc-86fc published
Jul 20, 2026 by snipeHigh -
API Checkout Endpoints Bind Live Inventory to Soft-Deleted TargetsGHSA-qffp-xpqv-gqr4 published
Aug 24, 2026 by snipeModerate -
Audit Log Misattribution on API Consumable CheckoutGHSA-x9p8-vvc5-q754 published
Aug 24, 2026 by snipeModerate -
SAML Account Takeover via Username Collation BypassGHSA-w3vv-5wxh-xg4h published
Aug 24, 2026 by snipeHigh