blacksmithgu/obsidian-dataview

blacksmithgu/obsidian-dataview

GitHubGitHub
GitHubgithub.com
blacksmithgu.github.ioblacksmithgu.github.io
Releases145
Frequency1 week 3 days
Last Release
Stars9.22K
A data index and query language over Markdown files, for https://obsidian.md/.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2021-42057NVD↗
= 0.4.12, <= 0.4.11, < 0.4.137.8 HIGH9.3 HIGH

Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which allows an attacker to craft malicious Markdown files that will execute arbitrary code once opened. NOTE: 0.4.13 provides a mitigation for some use cases.