[HIGH] Snipe-IT: 2FA bypass via the API token flow

PKSA-2634-9r51-kjsx CVE-2026-63493 GHSA-hxcx-9h4f-42xx

Affected package: snipe/snipe-it

Affected version: <8.7.0

Reported by:
GitHub