medium6.8
CVE-2025-58401
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form.
Impact
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account.
Affected products
| Product | Affected versions |
|---|---|
| Obsidian GitHub Copilot Plugin | before 1.1.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.