← Database

CVE-2026-23486

MEDIUM CVSS: 5.3 Published: 2026-03-23 Modified: 2026-06-17

Description

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, a publicly accessible endpoint exposes all user information, including usernames, roles, and account creation dates. This issue has been patched in version 1.8.4.

Affected Platforms

Blinko Blinko

Weakness Type

CWE-200

References