Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.5%	CVE-2026-111915Yank Note · Path Traversal High8.2EPSS 0.5%2026-10-19CVE Database V5CVE-2026-111915 Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlisted endpoint, to read SSH keys, configuration, or notes. EPSS 0.5%Vulnerability purocean	CVE Database V5	2026-10-19

Showing 1–1 of 1 result