r on jump\")\n \t\t\t.setDesc(\n-\t\t\t\t\"Enable to prevent the search field from being cleared automatically after clicking a heading.\"\n+\t\t\t\t\"Turn off the ability to keep the search field text after clicking a heading.\"\n \t\t\t)\n \t\t\t.addToggle((toggle) => {\n \t\t\t\ttoggle\n","securityAnnotations":[]},{"path":"src/settings/options/DisableSearchFieldAutoFocusSetting.ts","hunks":"@@ -6,7 +6,7 @@ export default class DisableSearchFieldAutofocusSetting extends DynamicOutlineSe\n \t\tnew Setting(this.containerEl)\n \t\t\t.setName(\"Disable search field autofocus\")\n \t\t\t.setDesc(\n-\t\t\t\t\"Enable to automatically focus the search field when the outline window opens. Allows immediate keyboard input.\"\n+\t\t\t\t\"Turn off the automatic focusing of the search field when the outline window opens.\"\n \t\t\t)\n \t\t\t.addToggle((toggle) => {\n \t\t\t\ttoggle\n","securityAnnotations":[]},{"path":"src/settings/settings.ts","hunks":"$24","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.18.0","initialDiffTo":"1.19.0","summary":"Dynamic Outline generates a floating table of contents UI by parsing the active document's markdown structure; it does not access Obsidian's vault APIs or make network requests. The plugin operates entirely client-side with no confirmed data transmission, external communication, or code obfuscation. Based on the absence of vault API usage and network activity, the plugin appears limited to local document parsing and rendering a navigation overlay.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRange":">=4.0.0 <4.1.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect"