CVE-2026-23481

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is an authenticated arbitrary file write vulnerability in saveAdditionalDevFile. This issue has been patched in version 1.8.4.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security-advisories@github.com

Published

2026-03-23

Last modified

2026-03-24

Weaknesses

CWE-22

Affected products

• Blinko (Blinko)
• Blinko (Blinkospace)

References

• https://github.com/blinkospace/blinko/commit/02a4205f1ad22d0e78dc2ab2967b551d0dbd0a06
• https://github.com/blinkospace/blinko/releases/tag/1.8.4
• https://github.com/blinkospace/blinko/security/advisories/GHSA-38hg-8p2j-76g5