annelNum: 1,","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets asr.tencentcloudapi.com (https://asr.tencentcloudapi.com)","endpointSource":"hardcoded-url"},{"host":"office-api-ist-dx.iflyaisol.com","url":"https://office-api-ist-dx.iflyaisol.com","filePath":"src/config.ts","lineNumber":135,"codeSnippet":" 132 | appId: \"\",\n 133 | apiKey: \"\",\n 134 | apiSecret: \"\",\n> 135 | endpoint: \"https://office-api-ist-dx.iflyaisol.com\",\n 136 | language: \"autodialect\",\n 137 | pollIntervalSeconds: 15,\n 138 | timeoutSeconds: 10800","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets office-api-ist-dx.iflyaisol.com (https://office-api-ist-dx.iflyaisol.com)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"1.0.4","initialDiffTo":"1.1.0","summary":"The plugin reads your vault’s markdown files and a cached vault file to find local audio links, then inserts transcripts back into notes. When you trigger transcription, it sends the audio or related request data to one of the configured ASR services: OpenAI, Tencent Cloud ASR, or iFlytek ASR. It can also retrieve data from a configured endpoint, depending on how it is set up.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"ip-address","packageVersion":"<=10.3.0","severity":"high","title":"ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass","advisoryUrl":"https://github.com/advisories/GHSA-mwp4-54f8-5fhr","ghsaId":"GHSA-mwp4-54f8-5fhr","cveId":null,"vulnerableRange":"<=10.3.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"ip-address","packageVersion":">=10.1.1 <=10.2.1","severity":"moderate","title":"ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks","advisoryUrl":"https://github.com/advisories/GHSA-4xrf-jv44-h6hh","ghsaId":"GHSA-4xrf-jv44-h6hh","cveId":null,"vulnerableRange":">=10.1.1 <=10.2.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"ip-address","packageVersion":">=10.1.1 <=10.2.0","severity":"moderate","title":"ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks","advisoryUrl":"https://github.com/advisories/GHSA-22jq-vg5j-6vgg","ghsaId":"GHSA-22jq-vg5j-6vgg","cveId":null,"vulnerableRange":">=10.1.1 <=10.2.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":11,"directDeps":3,"transitiveDeps":0}}]]}]

Local Audio Plus