← Database

CVE-2026-23487

MEDIUM CVSS: 6.5 Published: 2026-03-23 Modified: 2026-06-17

Description

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an IDOR vulnerability where user.detail Endpoint Leaks the Superadmin Token. This issue has been patched in version 1.8.4.

Affected Platforms

Blinko Blinko

Weakness Type

CWE-639

References