vel":0,"analyzedAt":"2026-08-11T07:32:41.000Z","releaseDate":"2026-05-31T17:15:27.000Z","artifactStatus":"verified"}],"findings":[{"id":1045228,"pluginId":"alert-banner","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":23,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/samgilletgaras/obsidian-alert-banner/blob/refs/tags/1.0.0/src/main.ts#L23"},{"id":1045229,"pluginId":"alert-banner","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":34,"codeSnippet":"this.app.metadataCache.on","explanation":"Accesses Obsidian API: app.metadataCache","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/samgilletgaras/obsidian-alert-banner/blob/refs/tags/1.0.0/src/main.ts#L34"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"1.0.0","summary":"The plugin shows a configurable warning banner at the top of notes that match a specific tag. In the reviewed build, it does not use Obsidian Vault APIs and has no recorded network activity, so there is no confirmed behavior of reading vault contents through official APIs or sending data outside the app. Its practical capability is to change how matching notes are displayed based on local tags/settings.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=5.0.0 <5.0.6","severity":"moderate","title":"brace-expansion: Large numeric range defeats documented `max` DoS protection","advisoryUrl":"https://github.com/advisories/GHSA-jxxr-4gwj-5jf2","ghsaId":"GHSA-jxxr-4gwj-5jf2","cveId":null,"vulnerableRange":">=5.0.0 <5.0.6","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=3.0.0 <5.0.7","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=3.0.0 <5.0.7","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaI

Alert Banner