obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77362 · GHSA-43r2-c7g8-prc8 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
76–80 of 80 matching · newest first
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77362 · GHSA-43r2-c7g8-prc8 · amended
npm obsidian-tc · Upgrade to 1.31.4 or later · >= 1.13.0, <= 1.31.3 · CVE-2026-115477 · GHSA-737x-cwfr-5vvc · amended
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77366 · GHSA-84c9-qqpq-2pq5 · amended
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77364 · GHSA-cvp8-vvgf-69q4 · amended
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77361 · GHSA-c5xx-h28h-f682 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.