[HIGH] Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update

PKSA-9w68-kyxd-kgh7 CVE-2026-55516 GHSA-575r-357h-fhch

Affected package: snipe/snipe-it

Affected version: <=8.6.1

Reported by:
GitHub