~ / search / GHSA-45mx-g85m-wwm3

GHSA-45mx-g85m-wwm3

Obsidian does not require user confirmation for non-http/https URLs.

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-38148

Packages

EcosystemPackageAffectedFixed in
npm obsidian < 0.12.12 0.12.12

Details

As written in the advisory (Markdown source, shown as plain text).

Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.

References

External links from the advisory. They lead to third-party sites.