obsidian-tc vulnerabilities (npm)
7 vulnerabilities.
-
obsidian-tcnpm obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes 7.1 High -
obsidian-tcnpm obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP 7.1 High -
obsidian-tcnpm obsidian-tc symlink path mismatch bypasses read ACL restrictions 4.7 Medium -
obsidian-tcnpm obsidian-tc bridge tools expose data outside the read ACL 4.3 Medium -
obsidian-tcnpm obsidian-tc tokens can access arbitrary configured vaults 9.9 Critical -
obsidian-tcnpm obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets 6.5 Medium -
obsidian-tcnpm obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access 8.8 High