[MEDIUM] Snipe-IT vulnerable to stored XSS via inline-served attachment

PKSA-3mmm-zfys-jjqm CVE-2026-55466 GHSA-jhph-5q74-pmfx

Affected package: snipe/snipe-it

Affected version: <=8.6.1

Reported by:
GitHub