Threats tagged 'ghsa-gc7g-q4vc-cx9r'

A vulnerability in purocean Yank Note version 3.93.0 affects the config.getAll function in the Settings Endpoint, leading to information disclosure. The issue can be exploited remotely without authentication. A public exploit exists. Upgrading to version 3.93.1 resolves the vulnerability by removing the sensitive key from the response.