T06:01:20.000Z","releaseDate":"2026-04-15T06:01:20.000Z","artifactStatus":"verified"},{"id":4487,"version":"0.0.4","score":100,"privacyLevel":0,"analyzedAt":"2023-10-29T22:13:11.000Z","releaseDate":"2023-10-29T22:13:11.000Z","artifactStatus":"verified"},{"id":4486,"version":"0.0.3","score":100,"privacyLevel":0,"analyzedAt":"2023-09-23T16:57:43.000Z","releaseDate":"2023-09-23T16:57:43.000Z","artifactStatus":"verified"},{"id":4485,"version":"0.0.2","score":100,"privacyLevel":0,"analyzedAt":"2023-09-23T16:13:00.000Z","releaseDate":"2023-09-23T16:13:00.000Z","artifactStatus":"verified"},{"id":4484,"version":"0.0.1","score":100,"privacyLevel":0,"analyzedAt":"2023-09-20T03:54:46.000Z","releaseDate":"2023-09-20T03:54:46.000Z","artifactStatus":"verified"}],"findings":[{"id":994161,"pluginId":"canvas-send-to-back","version":"0.1.1","category":"permissions_scope","severity":"info","filePath":"src/canvas.ts","lineNumber":36,"codeSnippet":"app.workspace.getActiveViewOfType","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/Zachatoo/obsidian-canvas-send-to-back/blob/0.1.1/src/canvas.ts#L36"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"0.1.0","initialDiffTo":"0.1.1","summary":"Confirmed: this plugin only changes the stacking order of cards in an Obsidian canvas, moving them to the top or behind other cards, and it does not use Vault APIs or make network requests. Capability: based on the listed behavior, it does not appear to send data to any external service, and there are no configured network destinations.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=5.0.0 <5.0.6","severity":"moderate","title":"brace-expansion: Large numeric range defeats documented `max` DoS protection","advisoryUrl":"https://github.com/advisories/GHSA-jxxr-4gwj-5jf2","ghsaId":"GHSA-jxxr-4gwj-5jf2","cveId":null,"vulnerableRange":">=5.0.0 <5.0.6","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=3.0.0 <5.0.7","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=3.0.0 <5.0.7","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0

Canvas Send to Back