ctivityTier":"active"},"versions":[{"id":104485,"version":"1.0.4","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T06:00:18.000Z","releaseDate":"2026-06-01T07:18:58.000Z","artifactStatus":"verified"},{"id":104484,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T06:00:08.000Z","releaseDate":"2026-05-29T09:43:12.000Z","artifactStatus":null},{"id":104483,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T05:59:59.000Z","releaseDate":"2026-05-29T09:10:40.000Z","artifactStatus":null},{"id":104482,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T05:59:50.000Z","releaseDate":"2026-05-29T09:06:22.000Z","artifactStatus":null},{"id":104481,"version":"1.0.0","score":100,"privacyLevel":0,"analyzedAt":"2026-08-13T05:59:41.000Z","releaseDate":"2026-05-29T08:47:29.000Z","artifactStatus":null}],"findings":[{"id":1076518,"pluginId":"csharp-snippet-runner","version":"1.0.4","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":195,"codeSnippet":"this.app.vault.adapter","explanation":"Accesses Obsidian API: app.vault","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/ohm-engineering/obsidian-csharp-interactive/blob/refs/tags/1.0.4/src/main.ts#L195"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.3","initialDiffTo":"1.0.4","summary":"The plugin’s confirmed behavior is to run C# code blocks inside Obsidian using an auto-installed CSharpRepl runtime; it does not use Obsidian vault APIs itself. Based on the reviewed metadata, it does not send data to any network service. Because it executes user-supplied C# code, that code can access local files and can send data to network destinations if the snippet is written to do so.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":

CSharp Snippet Runner