3,"codeSnippet":" 10 | const COLOR_RE = /`#([0-9a-fA-F]{6})`/;\n 11 | \n 12 | export async function loadTasks(app: App, taskTag: string): Promise {\n> 13 | \tconst files = app.vault.getMarkdownFiles();\n 14 | \tconst tasks: LindarTask[] = [];\n 15 | \n 16 | \tfor (const file of files) {","explanation":"Reads all markdown files in your vault","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/punkyard/obsidian-lindar/blob/refs/tags/0.3.1/src/events/task-store.ts#L13"},{"id":1123640,"pluginId":"lindar","version":"0.3.1","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":105,"codeSnippet":"this.app.workspace.getLeavesOfType","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/punkyard/obsidian-lindar/blob/refs/tags/0.3.1/src/main.ts#L105"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"0.3.0","initialDiffTo":"0.3.1","summary":"The plugin reads one specific vault file by path and can also read all Markdown files in your vault to build its yearly linear calendar and planning views. No network activity was observed, so there is no confirmed behavior showing it sends data to any external service. Based on the available information, it does not appear to have any network-based capabilities enabled.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":"<=3.1.0","severity":"high","title":"fast-uri vulnerable to path traversal via percent-encoded dot segments","advisoryUrl":"https://github.com/advisories/GHSA-q3j6-qgpj-74h6","ghsaId":"GHSA-q3j6-qgpj-74h6","cveId":null,"vulnerableRange":"