od,\n 180 | headers: {","networkType":"active-outbound","sendsData":true,"dataDescription":"requestUrl() makes a network request to api.notion.com (https://api.notion.com/v1)","endpointSource":"hardcoded-url"},{"host":"api.notion.com","url":null,"filePath":"src/notion-client.ts","lineNumber":256,"codeSnippet":" 253 | redirectUri: string\n 254 | ): Promise {\n 255 | const basic = Buffer.from(`${clientId}:${clientSecret}`).toString(\"base64\");\n> 256 | const response = await requestUrl({\n 257 | url: `${NOTION_API}/oauth/token`,\n 258 | method: \"POST\",\n 259 | headers: {","networkType":"active-outbound","sendsData":true,"dataDescription":"requestUrl() makes a network request to api.notion.com (https://api.notion.com/v1/oauth/token)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"0.1.10","initialDiffTo":"0.1.11","summary":"Akbun Notion Sync reads all markdown files in your vault so it can sync notes to Notion pages. It sends data to `api.notion.com/v1` using Obsidian’s `requestUrl()` network API, so confirmed outbound traffic goes to Notion’s API. In practice, it can send your note content and related metadata to Notion when you run a sync or otherwise trigger it.","dependencyVulnerabilities":[{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"vite","packageVersion":"<=6.4.1","severity":"moderate","title":"Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling","advisoryUrl":"https://github.com/advisories/GHSA-4w7w-66w2-5vf9","ghsaId":"GHSA-4w7w-66w2-5vf9","cveId":null,"vulnerableRange":"<=6.4.1","fixAvailable":"4.1.10","source":"npm-audit","isDirect":false,"path":"vite-node > vite, vitest > vite"},{"packageName":"vite","packageVersion":"<=6.4.2","severity":"moderate","title":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows","advisoryUrl":"https://github.com/advisories/GHSA-v6wh-96g9-6wx3","ghsaId":"GHSA-v6wh-96g9-6wx3","cveId":null,"vulnerableRange":"<=6.4.2","fixAvailable":"4.1.10","source":"npm-audit","isDirect":false,"path":"vite-node > vite, vitest > vite"},{"packageName":"vite","packageVersion":"<=6.4.2","severity":"high","title":"vite: `server.fs.deny` bypass on Windows alternate paths","advisoryUrl":"https://github.com/advisories/GHSA-fx2h-pf6j-xcff","ghsaId":"GHSA-fx2h-pf6j-xcff","cveId":null,"vulnerableRange":"<=6.4.2","fixAvailable":"4.1.10","source":"npm-audit","isDirect":false,"path":"vite-node > vite, vitest > vite"},{"packageName":"vitest","packageVersion":"<3.2.6","severity":"critical","title":"When Vitest UI server is listening, arbitrary file can be read and executed","advisoryUrl":"https://github.com/advisories/GHSA-5xrq-8626-4rwp","ghsaId":"GHSA-5xrq-8626-4rwp","cveId":null,"vulnerableRange":"<3.2.6","fixAvailable":"4.1.10","source":"npm-audit","isDirect":true,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":6,"directDeps":0,"transitiveDeps":0}}]]}]