blinkospace has 3 CVEs on record. 3 were published in the last 90 days. The median CVSS is 5.4 (medium). The most common weakness class is CWE-639 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Weakness classes
Products
- blinko 3
Worst active — by depth score
CVE-2026-85607High· 8.8Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessages in server/rou…61CVE-2026-110774Medium· 5.3Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check41CVE-2026-113597Medium· 5.4Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures30
blinkospace vulnerabilities
CVEs affecting blinkospace, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-113597Medium· 5.4Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures
Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to read and modify other users' tags by supplying arbitrary tag IDs. Attackers can enumerate sequentia…
CVE-2026-110774Medium· 5.3PoCBlinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check
Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check. Attackers can supply another user's stored f…
CVE-2026-85607High· 8.8PoCBlinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessages in server/rou…
Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple tRPC procedures (message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessages in server/rou…