CVE-2026-104078 | Obsidian Desktop up to 1.13.x Safe filterURL href input validation

October 8, 2026 Yanac

A vulnerability was found in Obsidian Desktop up to 1.13.x and classified as problematic. Affected by this issue is the function filterURL of the component Safe. The manipulation of the argument href results in improper input validation.

This vulnerability is reported as CVE-2026-104078. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More