Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-r3g7-r4hr-m258
  • npm/obsidian-tc
 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit... 5 hours ago
  • Fix available
  • Severity - 7.1 (High)
GHSA-pqh8-4pj7-32xx
  • npm/obsidian-tc
 obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling... 5 hours ago
  • Fix available
  • Severity - 9.6 (Critical)
GHSA-43r2-c7g8-prc8
  • npm/obsidian-tc
 obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields 5 hours ago
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-737x-cwfr-5vvc
  • npm/obsidian-tc
 obsidian-tc: Declined human-in-the-loop confirmations can permit destructive... 6 hours ago
  • Fix available
  • Severity - 7.1 (High)
GHSA-84c9-qqpq-2pq5
  • npm/obsidian-tc
 obsidian-tc tokens can access arbitrary configured vaults 6 hours ago
  • Fix available
  • Severity - 9.9 (Critical)
GHSA-cvp8-vvgf-69q4
  • npm/obsidian-tc
 obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are... 6 hours ago
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-c5xx-h28h-f682
  • npm/obsidian-tc
 obsidian-tc : Symlink read-ACL scope bypass via lexical path checks 6 hours ago
  • Fix available
  • Severity - 4.7 (Medium)