s","lineNumber":396,"codeSnippet":" 393 | ensureFolder: async (path: string): Promise => {\n 394 | const normalised = normalizePath(path);\n 395 | if (normalised === '' || normalised === '/') return;\n> 396 | const existing = vault.getAbstractFileByPath(normalised);\n 397 | if (existing instanceof TFolder) return;\n 398 | if (existing) {\n 399 | throw new Error(`\"${normalised}\" exists but is not a folder`);","explanation":"Reads a single vault file by path in a loop over all files","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/masoudmim/obsidian-dogear/blob/refs/tags/1.0.2/src/main.ts#L396"}],"factors":null,"networkEndpoints":[{"host":"","url":null,"filePath":"src/main.ts","lineNumber":331,"codeSnippet":" 328 | url: string,\n 329 | headers: Record,\n 330 | ): Promise {\n> 331 | const response = await requestUrl({ url, headers, method: 'GET', throw: false });\n 332 | \n 333 | // Header names are case-insensitive; lower-case them so Retry-After\n 334 | // can be found regardless of how the server capitalised it.","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/main.ts","lineNumber":728,"codeSnippet":" 725 | );\n 726 | \n 727 | try {\n> 728 | const res = await requestUrl({ url: job.source, method: 'GET', throw: false });\n 729 | if (res.status === 403 || res.status === 429) {\n 730 | // Being asked to slow down mid-run: stop rather than\n 731 | // push through and risk a longer block.","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"1.0.1","initialDiffTo":"1.0.2","summary":"Dogear reads one cached vault file and also loops through vault files, opening files by path as it goes. For network behavior, it retrieves data from a configured endpoint and from a URL determined at runtime, so it can reach out to remote services when those settings or inputs are used.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: