@stackflag.bsky.socialCVE-2026-46649 - joplin
Joplin Server versions before 3.7.2 let anyone repeatedly try a nine‑digit single sign‑on code without any limit. If the correct code is guessed, the attacker receives a full session…
Too many irrelevant or confusing CVEs? Use stackflag.com