Skip to content
OpenAdvisories

Package · Go

github.com/blnkfinance/blnk

1 known vulnerabilities.

1 result · Feed

  • High —

    Blnk has an API key authorization bypass in owner and scope enforcement

    Blnk API key endpoints had an authorization issue that allowed non-master API keys to perform key-management actions outside their intended authorization boundary. In affected versions, API key operations trusted caller-controlled request values for owner and…