Threats affecting pkg:npm/logseq

CVE-2026-124573 is a medium-severity vulnerability in logseq versions 2.0.1 and 2.0.2 affecting the Local HTTP API component. The flaw involves missing authentication in the validate-auth-token function, allowing remote attackers to potentially bypass authentication. Public exploit code exists, but no official response or patch has been issued by the project as of the publication date.