CVE-2026-122154

A vulnerability in purocean Yank Note version 3.93.0 allows for information disclosure via the Settings Endpoint . Specifically, the config.getAll function in the src/main/server/index.ts file can be manipulated to leak sensitive data. The attack can be initiated remotely , and an exploit is publ...

CVE-2026-122154 purocean Yank Note Settings Endpoint index.ts config.getAll information disclosure

A vulnerability was found in purocean Yank Note 3.93.0. This impacts the function config.getAll of the file src/main/server/index.ts of the component Settings Endpoint. The manipulation results in information disclosure. The attack may be launched remotely. The exploit has been made public and...