ObsidianFrom the builder
New security page and independent audit completed by Cure53
Obsidian has launched a Security page that explains how it protects user data and hosts third-party audits, starting with a Cure53 penetration test and source code review of its apps. The audit ended in late December 2023 having found four vulnerabilities, among them a CORS bypass, arbitrary file read and an arbitrary file write through path traversal in the Sync plugin, all fixed in Obsidian 1.5.3 on December 26 and confirmed as properly addressed by Cure53.
Our first audit by Cure53 is now available, and detailed below.
Saved . A shortened excerpt from the official blog; the original publisher retains authorship.