ints":[{"host":"","url":null,"filePath":"src/main.ts","lineNumber":349,"codeSnippet":" 346 | const map: Record = {};\n 347 | for (const u of urls) {\n 348 | try {\n> 349 | const res = await requestUrl({ url: u });\n 350 | const ct =\n 351 | (res.headers &&\n 352 | (res.headers[\"content-type\"] || res.headers[\"Content-Type\"])) ||","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"1.0.2","initialDiffTo":"1.0.3","summary":"This plugin definitely reads one vault file, and it also has access to all files in your vault, so its features can inspect other notes if needed. It retrieves data from a URL determined at runtime, which means it can fetch remote content when triggered. Based on the available information, there is no confirmed behavior showing it sends your vault data out.","dependencyVulnerabilities":[{"packageName":"@xmldom/xmldom","packageVersion":">=0.9.0 <0.9.10","severity":"high","title":"xmldom: Uncontrolled recursion in XML serialization leads to DoS","advisoryUrl":"https://github.com/advisories/GHSA-2v35-w6hq-6mfw","ghsaId":"GHSA-2v35-w6hq-6mfw","cveId":null,"vulnerableRange":">=0.9.0 <0.9.10","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":"speech-rule-engine > @xmldom/xmldom"},{"packageName":"@xmldom/xmldom","packageVersion":">=0.9.0 <0.9.10","severity":"high","title":"xmldom has XML injection through unvalidated DocumentType serialization","advisoryUrl":"https://github.com/advisories/GHSA-f6ww-3ggp-fr8h","ghsaId":"GHSA-f6ww-3ggp-fr8h","cveId":null,"vulnerableRange":">=0.9.0 <0.9.10","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":"speech-rule-engine > @xmldom/xmldom"},{"packageName":"@xmldom/xmldom","packageVersion":">=0.9.0 <0.9.10","severity":"high","title":"xmldom has XML node injection through unvalidated processing instruction serialization","advisoryUrl":"https://github.com/advisories/GHSA-x6wf-f3px-wcqx","ghsaId":"GHSA-x6wf-f3px-wcqx","cveId":null,"vulnerableRange":">=0.9.0 <0.9.10","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":"speech-rule-engine > @xmldom/xmldom"},{"packageName":"@xmldom/xmldom","packageVersion":">=0.9.0 <0.9.10","severity":"high","title":"xmldom has XML node injection through unvalidated comment serialization","advisoryUrl":"https://github.com/advisories/GHSA-j759-j44w-7fr8","ghsaId":"GHSA-j759-j44w-7fr8","cveId":null,"vulnerableRange":">=0.9.0 <0.9.10","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":"speech-rule-engine > @xmldom/xmldom"},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <=4.1.1","severity":"moderate","title":"JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases","advisoryUrl":"https://github.com/advisories/GHSA-h67p-54hq-rp68","ghsaId":"GHSA-h67p-54hq-rp68","cveId":null,"vulnerableRange":">=4.0.0 <=4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.3.0","severity":"high","title":"js-yaml: YAML merge-key chains can force quadratic CPU consumption","advisoryUrl":"https://github.com/advisories/GHSA-52cp-r559-cp3m","ghsaId":"GHSA-52cp-r559-cp3m","cveId":null,"vulnerableRange":">=4.0.0 <4.3.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"linkify-it","packageVersion":"<=5.0.0","severity":"high","title":"LinkifyIt#match scan loop has quadratic algorithmic complexity","advisoryUrl":"https://github.com/advisories/GHSA-22p9-wv53-3rq4","ghsaId":"GHSA-22p9-wv53-3rq4","cveId":null,"vulnerableRange":"<=5.

Achmage Slides Ultra 1920 v5