[HIGH] Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users

PKSA-czh5-xdx3-8gjh CVE-2026-48507 GHSA-6f75-x745-xcpr

Affected package: snipe/snipe-it

Affected version: <8.6.0

Reported by:
GitHub