[MEDIUM] Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation

PKSA-wsms-bsnd-yhwp CVE-2026-55472 GHSA-8w8c-8mx9-52cw

Affected package: snipe/snipe-it

Affected version: <=8.6.1

Reported by:
GitHub