Read the docs

blinkospace

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

blinkospace records in CISA KEV

No blinkospace vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blinko 10 records LOW

Records

15 records

TI-2026-58732 CVE-2026-85607 · GHSA-2rx6-45h4-gf4q

Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router

Priority HIGH 73

Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessa…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00689 Published 2026-09-04 No fix listed CWE-639
TI-2026-58749 CVE-2026-85624 · GHSA-vjwr-9399-cmx7

Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList

Priority MEDIUM 64

Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00422 Published 2026-09-04 No fix listed CWE-639
TI-2026-74433 CVE-2026-110774

Broken access control in Blinko lets users read private attachments

Priority MEDIUM 60

Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00237 Published 2026-10-14 No fix listed CWE-639
TI-2026-76926 CVE-2026-113597 · GHSA-j632-67pv-3cvg

Insecure direct object reference in Blinko tag tRPC router

Priority LOW 24

Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to read and modify other users' tags by supplying arbitrary tag IDs.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00272 Published 2026-10-20 No fix listed CWE-639
Open these records in search →