dcoded-url"},{"host":"auth.openai.com","url":null,"filePath":"src/auth/chatgptOAuth.ts","lineNumber":254,"codeSnippet":" 251 | async refreshCredential(\n 252 | credential: Pick,\n 253 | ): Promise {\n> 254 | const response = await requestUrl({\n 255 | url: `${ISSUER}/oauth/token`,\n 256 | method: \"POST\",\n 257 | headers: {","networkType":"active-outbound","sendsData":true,"dataDescription":"requestUrl() makes a network request to auth.openai.com (https://auth.openai.com/oauth/token)","endpointSource":"hardcoded-url"},{"host":"auth.openai.com","url":null,"filePath":"src/auth/chatgptOAuth.ts","lineNumber":299,"codeSnippet":" 296 | codeVerifier: string;\n 297 | redirectUri: string;\n 298 | }): Promise {\n> 299 | const response = await requestUrl({\n 300 | url: `${ISSUER}/oauth/token`,\n 301 | method: \"POST\",\n 302 | headers: {","networkType":"active-outbound","sendsData":true,"dataDescription":"requestUrl() makes a network request to auth.openai.com (https://auth.openai.com/oauth/token)","endpointSource":"hardcoded-url"},{"host":"chatgpt.com","url":null,"filePath":"src/api/chatgpt-oauth.ts","lineNumber":192,"codeSnippet":" 189 | \n 190 | let response;\n 191 | try {\n> 192 | response = await requestUrl({\n 193 | url: CODEX_RESPONSES_URL,\n 194 | method: \"POST\",\n 195 | headers,","networkType":"active-outbound","sendsData":true,"dataDescription":"requestUrl() makes a network request to chatgpt.com (https://chatgpt.com/backend-api/codex/responses)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"0.2.1","initialDiffTo":"0.2.2","summary":"This plugin reads all markdown files in your vault and can also read individual files through the vault adapter, so it has access to note contents in order to chat with you and make edits or new notes. It sends data to Anthropic, OpenAI, and ChatGPT backend endpoints when you use those integrations, and it can send account sign-in/device-auth data to OpenAI’s auth service if you use ChatGPT/OpenAI login. It also requests model lists from Anthropic and OpenAI to discover available models.","dependencyVulnerabilities":[{"packageName":"devalue","packageVersion":">=5.6.3 <=5.8.0","severity":"high","title":"Svelte devalue: DoS via sparse array deserialization","advisoryUrl":"https://github.com/advisories/GHSA-77vg-94rm-hx3p","ghsaId":"GHSA-77vg-94rm-hx3p","cveId":null,"vulnerableRange":">=5.6.3 <=5.8.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null},{"packageName":"svelte","packageVersion":">=5.46.0 <=5.55.6","severity":"moderate","title":"Svelte: SSR XSS via Insecure Promise Serialization in hydratable","advisoryUrl":"https://github.com/advisories/GHSA-f3cj-j4f6-wq85","ghsaId":"GHSA-f3cj-j4f6-wq85","cveId":null,"vulnerableRange":">=5.46.0 <=5.55.6","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"svelte","packageVersion":"<=5.55.6","severity":"moderate","title":"Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State","advisoryUrl":"https://github.com/advisories/GHSA-rcqx-6q8c-2c42","ghsaId":"GHSA-rcqx-6q8c-2c42","cveId":null,"vulnerableRange":"<=5.55.6","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"svelte","packageVersion":">=5.51.5 <=5.55.6","severity":"moderate","title":"Svelte: ReDoS in `` Tag Validation","advisoryUrl":"https://github.com/advisories/GHSA-9rmh-mm8f-r9h6","ghsaId":"GHSA-9rmh-mm8f-r9h6","cveId":null,"v

Chatting with AI