Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-42320
Not yet scoredAwaiting CVSS assessment
Published
June 3, 2026
Affected
1 project
Assigned by
GitHub
Description
GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 10.0.25 and 11.0.7, a technician can read arbitrary files inside the GLPI_DOC_DIR. Upgrade to 10.0.25 or 11.0.7 to receive a patch.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.NVD