obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

{
                    "vendor": "The-40-Thieves",
                    "product": "obsidian-tc",
                    "versions": [
                        {
                            "version": ">= 1.13.0, < 1.31.4",
                            "status": "affected"
                        }
                    ]
                }