Obsidian GitHub Copilot Plugin Cleartext Storage of GitHub API Token Vulnerability

A vulnerability exists in the Obsidian GitHub Copilot Plugin, specifically in versions prior to 1.1.7, where the GitHub API token is stored in cleartext. This flaw allows an attacker to access the token and perform unauthorized actions on the associated GitHub account.

Impact

Exploitation of this vulnerability could lead to unauthorized operations on the victim's GitHub account, using the accessed API token.

Remediation

Users are advised to update the Obsidian GitHub Copilot Plugin to version 1.1.7 or later.