Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

snipe-it before 8.6.3 Authorization Bypass via Bulk Delete

Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode

Snipe-IT: Privilege Escalation via Missing admin Permission Check in User Creation

Snipe-IT: Privilege Escalation via API Permissions Assignment

Snipe-IT before 8.7.0 CSS Injection via Custom CSS

Snipe-IT: Stored XSS via inline-served attachment

Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA

Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback

Snipe-IT: 2FA bypass via the API token flow

Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

Snipe-IT before 8.7.0 Authentication Bypass via API Middleware

snipe-it before 8.7.0 Authorization Bypass via API User Create/Update

Snipe-IT: Cross-company asset maintenance re-parenting via API update

Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API

Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num

Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients

Snipe-IT: CSV formula injection in Activity Report export

Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer

Snipe-IT: Authorization bypass on bulk editing users

Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users

Snipe-IT: Open redirect vulnerability