[MEDIUM] Snipe-IT has CSS Injection via `header_color` Setting

PKSA-78g8-kyjb-j6v1 CVE-2026-55481 GHSA-w7qw-5wfv-gwx9

Affected package: snipe/snipe-it

Affected version: <=8.6.1

Reported by:
GitHub