yank_note vulnerabilities

CVEs whose affected-version data names the yank_note package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111915Medium· 5.9

today

Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass t…

▾ Sunlitpurocean · Yank Notevia CVEORG