Description
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| snipe | snipe/snipe-it | unspecified – ≤ 5.3.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | snipe/snipe-it | < 5.4.0 | 5.4.0 | GHSA-2cqg-q7jm-j35c |