How many CVEs have a located fix in grokability/snipe-it?

53 published CVEs have a fix traced to functions in grokability/snipe-it, touching 208 functions across 118 files.

Which function in grokability/snipe-it has been patched by the most CVEs?

update in app/Http/Controllers/Users/UsersController.php has been changed by 5 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in grokability/snipe-it?

The median fix changes 26 lines. 47% of fixes change 20 lines or fewer, and 30% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

#75 of 500 repositories

grokability/snipe-it

Name: grokability/snipe-it: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 24, 2026

53

CVE fixes located

Published CVEs

208

Functions patched

Distinct function sites

118

Files patched

Distinct source files

2025–2026

Years covered

By CVE publication date

Overview

53 published CVEs have a fix traced to functions in grokability/snipe-it, the earliest published in 2025. Those fixes changed 208 distinct functions across 118 files, in 778 patch hunks.

Among the 500 repositories tracked here, grokability/snipe-it ranks #75 by the number of CVEs with a located fix.

Most patched functions

Functions in grokability/snipe-it changed by the most CVE fixes.

Most patched files

Files in grokability/snipe-it changed by the most CVE fixes.

1app/Http/Controllers/Users/UsersController.php10 CVEs · 8 functions
2app/Http/Controllers/Api/UsersController.php7 CVEs · 5 functions
3app/Http/Controllers/Api/AssetsController.php7 CVEs · 4 functions
4app/Http/Controllers/Api/ConsumablesController.php6 CVEs · 5 functions
5app/Http/Controllers/Api/AccessoriesController.php5 CVEs · 4 functions
6app/Http/Controllers/Api/LicensesController.php5 CVEs · 4 functions
7app/Models/User.php5 CVEs · 4 functions
8app/Models/Company.php5 CVEs · 3 functions
9app/Http/Controllers/LocationsController.php4 CVEs · 8 functions
10app/Http/Controllers/SettingsController.php4 CVEs · 7 functions

Fix size

How much code a CVE fix in grokability/snipe-it changes, with backports counted once.

26

Median lines changed

Added plus removed, per CVE

47%

Fixes of 20 lines or fewer

Share of CVE fixes

30%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in grokability/snipe-it, and the functions each fix changed.

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
CVE-2026-62368dataTableLayout
High · CVSS 8.4
EPSS 0.4%2026-09-24
Snipe-IT: 2FA bypass via the API token flow
CVE-2026-63493EnforceApiTwoFactorEnrollment Kernel
High · CVSS 8.6
EPSS 0.3%2026-09-24
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
CVE-2026-63498allowSafeInline show downloader
High · CVSS 8.7
EPSS 0.2%2026-09-24
Snipe-IT 8.6.3 Race Condition via Consumable Checkout
CVE-2026-86766store checkout applyAssetUpdate
High · CVSS 7.1
EPSS 0.3%2026-09-09
Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
CVE-2026-86765store checkout applyAssetUpdate
High · CVSS 7.1
EPSS 0.4%2026-09-09
Snipe-IT before 8.7.0 Authentication Bypass via API Middleware
CVE-2026-86762__construct CheckUserIsActivated Kernel
High · CVSS 8.6
EPSS 0.5%2026-09-09
snipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints
CVE-2026-86761scopeWithInventoryRelations print_all_assigned edit
Medium · CVSS 5.3
EPSS 0.4%2026-09-09
snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag
CVE-2026-86760update
Medium · CVSS 5.3
EPSS 0.4%2026-09-09
snipe-it before 8.7.0 Race Condition in Asset Checkout
CVE-2026-86744store checkout applyAssetUpdate
Low · CVSS 2.1
EPSS 0.3%2026-09-09
Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report
CVE-2026-86742downloadLocationScopingReport
Medium · CVSS 5.1
EPSS 0.4%2026-09-09
Snipe-IT before 8.7.0 CSS Injection via Custom CSS
CVE-2026-86738show_custom_css scopeUserLocation index
Critical · CVSS 9.3
EPSS 0.5%2026-09-08
Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field
CVE-2026-86734store
High · CVSS 7.1
EPSS 0.5%2026-09-08

Get an alert for each new grokability/snipe-it CVE, with the patched functions and AI-written analysis.

Monitor snipe-it CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

froxlor/froxlor53 CVEs gogs/gogs54 CVEs spring-projects/spring-framework54 CVEs debian/qemu52 CVEs py-pdf/pypdf52 CVEs wordpress/wordpress52 CVEs ansible/ansible55 CVEs krb5/krb555 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in grokability/snipe-it.

How many CVEs have a located fix in grokability/snipe-it?: 53 published CVEs have a fix traced to functions in grokability/snipe-it, touching 208 functions across 118 files.
Which function in grokability/snipe-it has been patched by the most CVEs?: update in app/Http/Controllers/Users/UsersController.php has been changed by 5 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in grokability/snipe-it?: The median fix changes 26 lines. 47% of fixes change 20 lines or fewer, and 30% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track grokability/snipe-it CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing