Homepage
About Snyk

obsidian-dataview@0.4.20 vulnerabilities

Advanced data views for Obsidian.md.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the obsidian-dataview package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Code Execution

obsidian-dataview is an Advanced data views for Obsidian.md.

Affected versions of this package are vulnerable to Arbitrary Code Execution. The evalInContext function executes user input, which allows an attacker to craft malicious Markdown files that will execute arbitrary code once opened.

How to fix Arbitrary Code Execution?

Upgrade obsidian-dataview to version 0.5.52 or higher.

<0.5.52
Go back to all versions of this package