ion":"1.0.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":45,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/nykkolin/obsidian-convert-base64-to-png/blob/1.0.0/main.ts#L45"},{"id":733663,"pluginId":"convert-base64-to-png","version":"1.0.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":124,"codeSnippet":"this.app.vault.adapter.mkdir","explanation":"Accesses Obsidian API: app.vault","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/nykkolin/obsidian-convert-base64-to-png/blob/1.0.0/main.ts#L124"},{"id":733664,"pluginId":"convert-base64-to-png","version":"1.0.0","category":"vault_access","severity":"medium","filePath":"main.ts","lineNumber":167,"codeSnippet":" 164 | \n 165 | \t// Convert base64 images in all markdown files\n 166 | \tasync convertAllFilesBase64ToPNG() {\n> 167 | \t\tconst files = this.app.vault.getMarkdownFiles();\n 168 | \t\tlet totalConversions = 0;\n 169 | \t\tlet processedFiles = 0;\n 170 | ","explanation":"Processes all markdown files to convert images to PNG format.","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/nykkolin/obsidian-convert-base64-to-png/blob/1.0.0/main.ts#L167"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"","initialDiffTo":"1.0.0","summary":"This plugin scans all markdown files in your vault, identifies base64-encoded image data embedded in notes, and converts those images to local PNG files. All processing happens locally with no network requests or external communication. The plugin has broad file access permissions to read and modify markdown files but performs no obfuscated operations.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0

Convert Base64 to PNG