[MEDIUM] Snipe-IT's import created_by can be overwritten

PKSA-spdd-pnpq-79f1 CVE-2026-55475 GHSA-5wx7-xq8j-v4qm

Affected package: snipe/snipe-it

Affected version: <=8.6.0

Reported by:
GitHub