Repository navigation
Security: coddingtonbear/obsidian-local-rest-api
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Authenticated RCE via config-directory writeGHSA-66m9-r757-qvq7 published
Oct 6, 2026 by coddingtonbearHigh -
Path traversal in MCP `vault_write` tool allows writing files outside the vaultGHSA-j9qv-qgpv-345g published
Sep 21, 2026 by coddingtonbearHigh -
Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/deleteGHSA-62gx-5q78-wrvx published
Jun 4, 2026 by coddingtonbearHigh
Learn more about advisories related to coddingtonbear/obsidian-local-rest-api in the GitHub Advisory Database