Post #4347193
2026-08-03 06:41 UTC
I love what your doing with obsidian @kepano@mastodon.social but can you help me understand this. Is it convoluted edge case that was not prioritised? Is opening untrusted md's not something you think people do? (I don't but just sample of 1). As Adam presents it, it looks bad but I'd like to hear the other side of the story.
https://www.linkedin.com/posts/evilpacket_if-you-use-obsidian-you-will-want-to-upgrade-share-7488660732641763328-69yj/
Replies (1)
-
@kepano@mastodon.social 2026-08-03 08:27
@gnyman@infosec.exchange it could have been faster but it seems reasonable given how narrow the issue is and how complex the deeper fix was (not just upgrading a dep but adding new approval flows for certain behaviors, which take a while to fully test across platforms) you also have to consider that every library is being bombarded with exotic, esoteric, and often poorly verified AI-generated vulnerability reports right now — as a small team it makes prioritizing your time difficult