Medium severity6.5NVD Advisory· Published Mar 23, 2026· Updated Jun 17, 2026
CVE-2026-23484
CVE-2026-23484
Description
Blinko is an AI-powered card note-taking project. In versions from 1.8.3 and prior, the fileName parameter is not filtered, allowing path traversal to write files anywhere on the file system. Moreover, this interface only requires authProcedure (normal user), not superAdminAuthMiddleware. At time of publication, there are no publicly available patches.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- blinkospace/blinkov5Range: <= 1.8.3
- Range: <=1.8.3
- Range: <=1.8.3
Patches
Vulnerability mechanics
References
1- github.com/blinkospace/blinko/security/advisories/GHSA-7v3f-v6vf-jm9qnvdVendor Advisory
News mentions
0No linked articles in our index yet.