Skip to content
OpenAdvisories

Package · Packagist

snipe/snipe-it

81 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 1.3
    CVE-2026-55542

    Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL

    Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, Snipe-IT S3 signature image retrieval lacks authorization before temporary URL. On S3-backed deployments, authenticated users who know a signature filename can obtain a 5-minute signed…

    grokability snipe-it snipe/snipe-it Packagist
  • Low 2.7
    CVE-2021-4075

    Server-Side Request Forgery (SSRF) in snipe/snipe-it

    snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Low 3.9
    CVE-2021-3938

    Cross-site Scripting (XSS) - Generic in snipe/snipe-it

    snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    snipe snipe/snipe-it snipe/snipe-it Packagist