Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-42321
Not yet scoredAwaiting CVSS assessment
Published
June 3, 2026
Affected
1 project
Assigned by
GitHub
Description
GLPI is a free asset and IT management software package. Starting in version 10.0.4 and prior to version 10.0.25, a technician can store an XSS payload in the asset locked tab. Upgrade to 10.0.25 or 11.0.7 to receive a patch.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.NVD