CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js

twiddles · May 22, 2024, 8:30pm

This public proof-of-concept shows Obsidian is affected, (the second screenshot is of Obsidian)