CyberSecBulletin

Jimprosser vulnerabilities

We track 1 vulnerability in Jimprosser products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.

1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score

Latest Jimprosser vulnerabilities

  • 9.4 Critical severity

    obsidian-web-mcp: Missing Authentication for Critical Functionality

    CVE-2026-54618Jimprosser

    Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization code without a login, consent, or session check, and /oauth/token can exchange that code for the static VAULT_MCP_TOKEN without authent