CVE-2026-122154 in Yank Note
Prediction
by VulDB Data Team • 11/04/2026
A vulnerability was found in <a href="/product/purocean:yank_note">purocean Yank Note 3.93.0</a>. This impacts the function <code>config.getAll</code> of the file <em>src/main/server/index.ts</em> of the component <em>Settings Endpoint</em>. The manipulation results in information disclosure. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 3.93.1 will fix this issue. The patch is identified as <em>59f85d48f17a70a402ad59dcecacdbec20f954df</em>. The affected component should be upgraded. The commit removes the key from the response.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.