https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T12:02:18.151421+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-19331 CVE-2026-19331 — bazylhorsey obsidian-mcp-server CanvasService.ts writeCanvas path traversal 2026-10-12T12:02:19.222306+00:00

Affected: bazylhorsey obsidian-mcp-server

A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.