Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-23485
5.3
MEDIUMCVSS v3
Published
March 23, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the filePath parameter accepts path traversal sequences, allowing enumeration of file existence on the server via different error responses. This issue has been patched in version 1.8.4.
blinkospace/blinko
GitHubAn open-source, self-hosted personal AI note tool prioritizing privacy, built using TypeScript .
GitHubAn open-source, self-hosted personal AI note tool prioritizing privacy, built using TypeScript .< 1.8.4NVD