ied"},{"id":8818,"version":"1.0.3","score":100,"privacyLevel":null,"analyzedAt":"2024-11-27T21:38:19.000Z","releaseDate":"2024-11-27T21:38:19.000Z","artifactStatus":"verified"},{"id":8817,"version":"1.0.2","score":100,"privacyLevel":null,"analyzedAt":"2024-11-24T14:46:28.000Z","releaseDate":"2024-11-24T14:46:28.000Z","artifactStatus":"verified"},{"id":8816,"version":"1.0.1","score":100,"privacyLevel":null,"analyzedAt":"2024-11-24T14:42:36.000Z","releaseDate":"2024-11-24T14:42:36.000Z","artifactStatus":"unavailable"},{"id":8815,"version":"1.0.0","score":100,"privacyLevel":null,"analyzedAt":"2024-11-22T19:19:31.000Z","releaseDate":"2024-11-22T19:19:31.000Z","artifactStatus":"verified"}],"findings":[{"id":744053,"pluginId":"discord-timestamps","version":"1.0.19","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":198,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/Erallie/discord-timestamps/blob/1.0.19/main.ts#L198"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"discord-timestamps","fromVersion":"1.0.18","toVersion":"1.0.19","files":[{"path":"main.ts","hunks":"$20","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.0.18","initialDiffTo":"1.0.19","summary":"This plugin performs client-side visual formatting of Discord timestamps within Obsidian notes, converting them to match Discord's display style. It accesses no Vault APIs, meaning it does not read or modify vault files, settings, or metadata. No network requests are performed by the plugin. The minimal attack surface is limited to potential supply-chain risks from dependencies.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-ya

Discord Timestamps