{"action":"Upgrade obsidian to 0.12.12 or later.","affected":[{"fixed":"0.12.12","introduced":"0"}],"component":"obsidian","cve_ids":["CVE-2021-38148"],"ecosystem":"npm","epss":0.01225,"exploited":false,"fixed_versions":["0.12.12"],"ghsa_id":"GHSA-45mx-g85m-wwm3","id":"tcs_01M5KEZCSBPVV3FE2CB824TBY9","modified_at":"2024-04-22T23:44:02.794621Z","published_at":"2022-05-24T19:10:22Z","references":["https://osv.dev/vulnerability/GHSA-45mx-g85m-wwm3","https://nvd.nist.gov/vuln/detail/CVE-2021-38148","https://github.com/obsidianmd/obsidian-api","https://web.archive.org/web/20210807011714/https://forum.obsidian.md/t/obsidian-release-v0-12-12/21564"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-45mx-g85m-wwm3","url":"https://osv.dev/vulnerability/GHSA-45mx-g85m-wwm3"}],"summary":"Obsidian does not require user confirmation for non-http/https URLs."}