Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-62gx-5q78-wrvx
  • npm/obsidian-local-rest-api
obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete 15 Jul
  • No fix available
  • Severity - 8.8 (High)
MAL-2025-18991
  • npm/dusk-lvvgg-m58r7-obsidian-project
Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-22284
  • npm/haven-x5nz7-1h12l-obsidian-project
Malicious code in haven-x5nz7-1h12l-obsidian-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-23376
  • npm/iris-ys7oy-ayux1-obsidian-project
Malicious code in iris-ys7oy-ayux1-obsidian-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-25605
  • npm/lotus-5sbc5-tvb8k-obsidian-project
Malicious code in lotus-5sbc5-tvb8k-obsidian-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28062
  • npm/obsidian-1k6o4-lgj2h-dawn-project
Malicious code in obsidian-1k6o4-lgj2h-dawn-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28063
  • npm/obsidian-8d87p-e0waw-rose-project
Malicious code in obsidian-8d87p-e0waw-rose-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28064
  • npm/obsidian-9dzi7-6um2j-xenith-project
Malicious code in obsidian-9dzi7-6um2j-xenith-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28065
  • npm/obsidian-b763a-7h0h1-solace-project
Malicious code in obsidian-b763a-7h0h1-solace-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28066
  • npm/obsidian-iumeo-ks71t-night-project
Malicious code in obsidian-iumeo-ks71t-night-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28067
  • npm/obsidian-jplel-d5lei-nymph-project
Malicious code in obsidian-jplel-d5lei-nymph-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28068
  • npm/obsidian-rm5zg-wjktt-ocean-project
Malicious code in obsidian-rm5zg-wjktt-ocean-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28069
  • npm/obsidian-vi126-k7sjp-hearth-project
Malicious code in obsidian-vi126-k7sjp-hearth-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28470
  • npm/orbit-t4hmg-n2rl2-obsidian-project
Malicious code in orbit-t4hmg-n2rl2-obsidian-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-28999
  • npm/pebble-9283b-ihxpi-obsidian-project
Malicious code in pebble-9283b-ihxpi-obsidian-project (npm) 14 Aug 2025
  • No fix available
MAL-2025-31132
  • npm/quartz-pg44a-qyrlb-obsidian-project
Malicious code in quartz-pg44a-qyrlb-obsidian-project (npm) 14 Aug 2025
  • No fix available