CVE-2025-64027
1 advisory.
Packagist/snipe/snipe-it CVE-2025-64027: medium, EPSS 0.25%
Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 8.3.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8x9v-8qgj-945x
- https://nvd.nist.gov/vuln/detail/CVE-2025-64027
- https://github.com/cybercrewinc/CVE-2025-64027
- https://github.com/grokability/snipe-it
CVE-2025-64027 · published · modified · JSON