Browse CVEs

HIGH 7.2 CVE-2026-23882 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP (Model Context Protocol) server creation function allows specifying… Blinko 1.8.4+ Fix from $1,9502026-03-23 MEDIUM 6.5 CVE-2026-23487 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an IDOR vulnerability where user.detail Endpoint Leaks the Superad… Blinko 1.8.4+ Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-23488 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the /api/v1/comment/create endpoint has an unauthorized access vulnerabilit… Blinko 1.8.4+ Fix from $1,6002026-03-23 HIGH 7.5 CVE-2026-23482 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ pa… Blinko 1.8.4+ Fix from $1,9502026-03-23 MEDIUM 6.5 CVE-2026-23481 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an authenticated arbitrary file write vulnerability in saveAdditio… Blinko 1.8.4+ Fix from $1,6002026-03-23 MEDIUM 6.5 CVE-2026-23484 Blinko is an AI-powered card note-taking project. In versions from 1.8.3 and prior, the fileName parameter is not filtered, allowing path traversal t… Blinko 1.8.3+ Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-23483 Blinko is an AI-powered card note-taking project. In versions from 1.8.3 and prior, the plugin file server endpoint uses join() to concatenate paths … Blinko 1.8.3+ Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-23485 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the filePath parameter accepts path traversal sequences, allowing enumerati… Blinko 1.8.4+ Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-23486 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including user… Blinko 1.8.4+ Fix from $1,6002026-03-23 HIGH 8.8 CVE-2026-23480 Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has … Blinko 1.8.4+ Fix from $1,9502026-03-23