2
/ 100
1 month ago
github_topic

obsidian-sync-vault-ce

Professional cloud sync & VFS for Obsidian. Features zero-space VFS, 4K streaming, MCP AI engine, and P2P collaboration. Supports Baidu/Aliyun/Quark/WebDAV/S3.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 2 critical, 7 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// known CVEs in dependencies2 critical7 high3 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalbasic-ftp@5.0.5GHSA-5rq4-664w-9x2c

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

criticalfast-xml-parser@5.2.5GHSA-m7jm-9gc2-mpf2

fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names

highbasic-ftp@5.0.5GHSA-6v7q-wjvx-w8wg

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

highbasic-ftp@5.0.5GHSA-rp42-5vxx-qpwr

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

highbasic-ftp@5.0.5GHSA-rpmf-866q-6p89

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/abcamus-obsidian-sync-vault-ce-yhbsg1)](https://m8ven.ai/mcp/abcamus-obsidian-sync-vault-ce-yhbsg1)
commit: ff9a0b3b1a530f5a525c8cafe4afd306c9c386dc
code hash: fa3a33145b7b32cee892701be10cc03ffd7a78542fe8e4fb8005870c3986166f
verified: 6/17/2026, 11:42:47 AM
view raw JSON →