GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
High
CVE-2026-115478
was published
for
obsidian-tc
(npm)
Oct 23, 2026
obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback
Critical
CVE-2026-77363
was published
for
obsidian-tc
(npm)
Oct 23, 2026
obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields
Moderate
CVE-2026-77362
was published
for
obsidian-tc
(npm)
Oct 23, 2026
obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
High
CVE-2026-115477
was published
for
obsidian-tc
(npm)
Oct 23, 2026
obsidian-tc tokens can access arbitrary configured vaults
Critical
CVE-2026-77366
was published
for
obsidian-tc
(npm)
Oct 23, 2026
obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default
Moderate
CVE-2026-77364
was published
for
obsidian-tc
(npm)
Oct 23, 2026
obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
Moderate
CVE-2026-77361
was published
for
obsidian-tc
(npm)
Oct 23, 2026
ProTip!
Advisories are also available from the
GraphQL API