Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-5385
Not yet scoredAwaiting CVSS assessment
Description
An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.
glpi-project/glpi
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
GitHubGLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.NVD