medium6.8
CVE-2025-59713
Snipe-IT allows unsafe deserialization
Impact
Snipe-IT before 8.1.18 allows unsafe deserialization.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | < 8.1.18 | 8.1.18 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 8.1.18 |