PT-2026-96274

Name of the Vulnerable Software and Affected Versions Joplin Server versions prior to 3.7.2 Description The GET '/api/login with code/:id' endpoint fails to apply the limiterLoginBruteForce mechanism when processing nine-digit SSO authentication codes. This allows an unauthenticated attacker to...