206 matches found
MAL-2025-28062 Malicious code in obsidian-1k6o4-lgj2h-dawn-project (npm)
The package obsidian-1k6o4-lgj2h-dawn-project was found to contain malicious code...
MAL-2025-40030 Malicious code in xylophone-aa5b0-k5qpo-obsidian-project (npm)
The package xylophone-aa5b0-k5qpo-obsidian-project was found to contain malicious code...
Malicious code in obsidian-jplel-d5lei-nymph-project (npm)
The package obsidian-jplel-d5lei-nymph-project was found to contain malicious code...
Malicious code in obsidian-iumeo-ks71t-night-project (npm)
The package obsidian-iumeo-ks71t-night-project was found to contain malicious code...
MAL-2025-28071 Malicious code in obsidian_9sirt_rppgo_twilight (npm)
The package obsidian9sirtrppgotwilight was found to contain malicious code...
MAL-2025-28470 Malicious code in orbit-t4hmg-n2rl2-obsidian-project (npm)
The package orbit-t4hmg-n2rl2-obsidian-project was found to contain malicious code...
MAL-2025-28069 Malicious code in obsidian-vi126-k7sjp-hearth-project (npm)
The package obsidian-vi126-k7sjp-hearth-project was found to contain malicious code...
MAL-2025-25605 Malicious code in lotus-5sbc5-tvb8k-obsidian-project (npm)
The package lotus-5sbc5-tvb8k-obsidian-project was found to contain malicious code...
MAL-2025-28064 Malicious code in obsidian-9dzi7-6um2j-xenith-project (npm)
The package obsidian-9dzi7-6um2j-xenith-project was found to contain malicious code...
Malicious code in obsidian-9dzi7-6um2j-xenith-project (npm)
The package obsidian-9dzi7-6um2j-xenith-project was found to contain malicious code...
Malicious code in iris-ys7oy-ayux1-obsidian-project (npm)
The package iris-ys7oy-ayux1-obsidian-project was found to contain malicious code...
Malicious code in obsidian-rm5zg-wjktt-ocean-project (npm)
The package obsidian-rm5zg-wjktt-ocean-project was found to contain malicious code...
Malicious code in xylophone-aa5b0-k5qpo-obsidian-project (npm)
The package xylophone-aa5b0-k5qpo-obsidian-project was found to contain malicious code...
MAL-2025-22284 Malicious code in haven-x5nz7-1h12l-obsidian-project (npm)
The package haven-x5nz7-1h12l-obsidian-project was found to contain malicious code...
Directory Traversal
Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Directory Traversal via the ObsidianReader process. An attacker can access arbitrary files outside the intended directory by creating symbolic links that point to sensitive files,...
Directory Traversal
Overview llama-index-readers-obsidian is a llama-index readers obsidian integration Affected versions of this package are vulnerable to Directory Traversal via the ObsidianReader process. An attacker can access arbitrary files outside the intended directory by creating symbolic links that point t...
Directory Traversal
Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Directory Traversal via the loaddata method in the ObsidianReader class. An attacker can access sensitive system files by exploiting hardlinks to bypass path restrictions. Details A...
CVE-2025-49618
In Plesk Obsidian 18.0.69, unauthenticated requests to /loginup.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint...
