Purocean has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 5.9 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-122157Medium· 6.3Purocean Yank Note Terminal index.ts checkPermission os command injection47CVE-2026-111915Medium· 5.9Yank Note before 3.93.1 Path Traversal via /api/help Endpoint33CVE-2026-122154Medium· 5.3purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure29
Purocean vulnerabilities
CVEs affecting Purocean, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-122154Medium· 5.3purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure
A vulnerability was found in purocean Yank Note 3.93.0. This impacts the function config.getAll of the file src/main/server/index.ts of the component Settings Endpoint. The manipulation results in information disclosure. The attack may b…
CVE-2026-122157Medium· 6.3PoCPurocean Yank Note Terminal index.ts checkPermission os command injection
A vulnerability was identified in Purocean Yank Note 3.93.0. Affected by this vulnerability is the function checkPermission of the file src/main/server/index.ts of the component Terminal Handler. Such manipulation leads to os command inj…
CVE-2026-111915Medium· 5.9Yank Note before 3.93.1 Path Traversal via /api/help Endpoint
Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass t…