https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:02:14 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-85624 <p>Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can enumerate sequential note IDs and retrieve complete content of other users&#39; private notes including attachments and tags.</p> <p>Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can enumerate sequential note IDs and retrieve complete content of other users&#39; private notes including attachments and tags.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-85624 https://vulnerability.circl.lu/vuln/ghsa-vjwr-9399-cmx7 <p>Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can enumerate sequential note IDs and retrieve complete content of other users&#39; private notes including attachments and tags.</p> <p>Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the noteReferenceList procedure that performs no ownership verification on supplied note identifiers. Authenticated attackers can enumerate sequential note IDs and retrieve complete content of other users&#39; private notes including attachments and tags.</p> https://vulnerability.circl.lu/vuln/ghsa-vjwr-9399-cmx7