Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-23481 EUVD-2026-14531

Blinko: Authenticated Arbitrary File Write - saveAdditionalDevFile

Published Mar 23, 2026 · Updated Mar 24, 2026 · Assigned by GitHub_M

Description

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an authenticated arbitrary file write vulnerability in saveAdditionalDevFile. This issue has been patched in version 1.8.4.

Affected products

VendorProductAffectedFixed
blinkospace blinko < 1.8.4 —

References