Blinko Blinko

• CVE-2026-108980 High 8.8 Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and th 1.1%