CVE-2026-122154 | purocean Yank Note 3.93.0 Settings Endpoint src/main/server/index.ts config.getAll information disclosure (Issue 532)

A vulnerability labeled as problematic has been found in purocean Yank Note 3.93.0. This impacts the function config.getAll of the file src/main/server/index.ts of the component Settings Endpoint. The manipulation results in information disclosure.

This vulnerability is cataloged as CVE-2026-122154. The attack may be launched remotely. Furthermore, there is an exploit available.

The affected component should be upgraded.

The commit removes the key from the response.VulDB Recent EntriesRead More