CVE-2026-44831

4.8

MEDIUMCVSS v3

Published

May 26, 2026

Affected

4 projects

Assigned by

GitHub

Severity scale

010

Description

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulnerability is fixed in 8.4.1.

grokability/snipe-it

GitHubA free open source IT asset/license management system

< 8.4.1NVD

snipeit

Python Package IndexPython library to access the SnipeIT API

< 8.4.1NVD

snipe/snipe-it

Docker Hub

More on this CVE

NVD↗GitHub Advisory↗

The *only* official docker hub repository for Snipe-IT from the maintainers of Snipe-IT.

< 8.4.1NVD

grokability/snipe-it

Docker HubPlease pull from snipe/snipe-it to get the latest version of the official Snipe-IT image.

< 8.4.1NVD

Security Advisories

CVE-2026-44831

Description

More on this CVE