Obsidian Turbocharged
Governed Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.The-40-Thieves/obsidian-tc
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-r3g7-r4hr-m258obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changesAlso filed as CVE-2026-115478 | high | Not flagged | Oct 23, 2026 |
| GHSA-737x-cwfr-5vvcobsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTPAlso filed as CVE-2026-115477 | high | Not flagged | Oct 23, 2026 |
| GHSA-c5xx-h28h-f682obsidian-tc : Symlink read-ACL scope bypass via lexical path checksAlso filed as CVE-2026-77361 | medium | Not flagged | Oct 13, 2026 |
| GHSA-43r2-c7g8-prc8obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fieldsAlso filed as CVE-2026-77362 | medium | Not flagged | Oct 13, 2026 |
| GHSA-pqh8-4pj7-32xxobsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopbackAlso filed as CVE-2026-77363 | critical | Not flagged | Oct 12, 2026 |
| GHSA-cvp8-vvgf-69q4obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by defaultAlso filed as CVE-2026-77364 | medium | Not flagged | Oct 12, 2026 |
| GHSA-84c9-qqpq-2pq5obsidian-tc tokens can access arbitrary configured vaultsAlso filed as CVE-2026-77366 | critical | Not flagged | Oct 12, 2026 |
Versions in the registry
1.34.0 (listed), 1.33.1, 1.33.0, 1.32.0, 1.31.8, 1.31.7, 1.31.6, 1.31.5, 1.31.4, 1.31.3, 1.31.2, 1.31.1, 1.31.0, 1.30.1, 1.30.0, 1.29.0, 1.28.4, 1.28.3, 1.28.2, 1.28.1, 1.28.0, 1.27.0, 1.26.0