blinkospace vulnerabilities

Newest CVEs

• CVE-2026-113597

  Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures

  blinkospace · blinko

  Medium5.3
• CVE-2026-110774

  Blinko through 1.8.8 Private Attachment Read via /api/file Route

  blinkospace · blinko

  Medium6.0
• CVE-2026-85624

  Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList

  blinkospace · blinko

  High7.1
• CVE-2026-85607

  Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router

  blinkospace · blinko

  High8.7
• CVE-2026-23882

  Blinko: Admin RCE - MCP Server Command Injection

  blinkospace · blinko

  High8.6
• CVE-2026-23485

  Blinko: Unauthorized Path Traversal File Enumeration - music-metadata

  blinkospace · blinko

  Medium6.9
• CVE-2026-23488

  Blinko: multiple interfaces in the comment feature allow unauthorized access

  blinkospace · blinko

  Medium6.9
• CVE-2026-23487

  Blinko: IDOR - user.detail Endpoint Leaks Superadmin Token

  blinkospace · blinko

  Medium6.0
• CVE-2026-23486

  Blinko: Unauthorized User Information Leak

  blinkospace · blinko

  Medium6.9
• CVE-2026-23480

  Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint

  blinkospace · blinko

  Medium5.3