obsidian-local-rest-api vulnerabilities

CVEs whose affected-version data names the obsidian-local-rest-api package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-62gx-5q78-wrvxHigh· 8.8

obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete

obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete

▾ Twilightobsidian-local-rest-api · obsidian-local-rest-apivia GHSA

obsidian-local-rest-api vulnerabilities (CVEs) · VulnSea