HIGH8.8npm
GHSA-62gx-5q78-wrvxobsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete
Modified: 7/15/2026
package
npm/obsidian-local-rest-api
pkg:npm/obsidian-local-rest-api
package
pkg:npm/obsidian-local-rest-api
obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete
Modified: 7/15/2026