npm: obsidian-tc tokens can access arbitrary configured vaults

npm: obsidian-tc tokens can access arbitrary configured vaults vulnerability discovered by ? in WordPress npm obsidian-tc versions 1.3.1...