CVE-2026-23485
Blinko: Unauthorized Path Traversal File Enumeration - music-metadata
Résumé
Blinko: Unauthorized Path Traversal File Enumeration - music-metadata
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the filePath parameter accepts path traversal sequences, allowing enumeration of file existence on the server via different error responses. This issue has been patched in version 1.8.4.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com