[MEDIUM] Snipe-IT has missing object-level authorization in Kits API

PKSA-3nxv-xvdx-984d CVE-2026-55478 GHSA-crv3-j83j-f3r6

Affected package: snipe/snipe-it

Affected version: <=8.6.1

Reported by:
GitHub