ithub.com","url":"https://api.github.com/repos/clairefro/obsidian-plugin-chronos/releases","filePath":"main.ts","lineNumber":899,"codeSnippet":" 896 | \t\t\t\"https://api.github.com/repos/clairefro/obsidian-plugin-chronos/releases\";\n 897 | \n 898 | \t\ttry {\n> 899 | \t\t\tconst response = await fetch(url, {\n 900 | \t\t\t\theaders: {\n 901 | \t\t\t\t\tAccept: \"application/vnd.github.v3+json\",\n 902 | \t\t\t\t},","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"hardcoded-url"},{"host":"generativelanguage.googleapis.com","url":null,"filePath":"lib/ai/providers/gemini.ts","lineNumber":40,"codeSnippet":" 37 | \t\t};\n 38 | \n 39 | \t\tconst options = {\n> 40 | \t\t\turl,\n 41 | \t\t\tmethod: \"POST\",\n 42 | \t\t\tbody: JSON.stringify(body),\n 43 | \t\t\theaders: {","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets generativelanguage.googleapis.com (https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash:generateContent)","endpointSource":"hardcoded-url"}],"initialDiff":{"pluginId":"chronos","fromVersion":"3.6.2","toVersion":"3.6.3","files":[{"path":"views/ChronosTimelineBasesView.ts","hunks":"@@ -469,8 +469,6 @@ function chronosItemsToMarkdown(\n \t\t\tmarker: \"=\",\n \t\t};\n \n-\t\tconsole.log({ item });\n-\n \t\t// default to event if no type present\n \t\tlet line = `${type && TYPES[type] ? TYPES[type] : \"-\"} [${start}`;\n \t\tif (end) line += `~${end}`;\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":5}},"initialDiffFrom":"3.6.2","initialDiffTo":"3.6.3","summary":"The chronos plugin reads all markdown file contents and metadata from your vault to parse timeline data. It sends this data to an external API service via HTTP POST for processing and receives rendered timeline information back. The plugin also fetches release version information from GitHub to check for updates.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","advisoryUrl":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","ghsaId":"GHSA-7r86-cg39-jmmj","cveId":null,"

Chronos Timeline