Skip to content
OpenAdvisories

Package · Packagist

snipe/snipe-it

81 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-37709

    Snipe-IT has insecure permissions in file uploads

    Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controllers/Api/UploadedFilesController.php component

    snipe/snipe-it Packagist
  • Critical 9.0
    CVE-2022-1445

    Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it

    Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Critical 9.1
    CVE-2022-1380

    Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it

    Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.

    snipe snipe/snipe-it snipe/snipe-it Packagist