CVE-2026-23486

Katalog CVE

CVSS 5.3 · Medium EPSS 0,71%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada blinko. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4.

Rincian

Terbit di NVD

23 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/blinkospace/blinko/security/advisories/GHSA-446p-2xf5-frxf advisory vendor
• https://github.com/blinkospace/blinko/commit/ec1e3e20384b620b8bf928fe80b4d8546757b419 patch
• https://github.com/blinkospace/blinko/releases/tag/1.8.4 release notes