Skip to content

obsidian-local-rest-api vulnerabilities (npm)

1 vulnerability.

obsidian-local-rest-api npmobsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/deleteGHSA-62gx-5q78-wrvxFix available8.8 HighJuly 15, 2026