ASSWORD}`);\n 2183 | \n> 2184 | const response = await requestUrl({\n 2185 | url: dbUrl,\n 2186 | method: \"GET\",\n 2187 | headers: {","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"},{"host":"","url":null,"filePath":"src/sync/adapters/ObsidianHttpClient.ts","lineNumber":14,"codeSnippet":" 11 | async request(\n 12 | params: Parameters[0]\n 13 | ): ReturnType {\n> 14 | const result = await requestUrl(params);\n 15 | return {\n 16 | status: result.status,\n 17 | text: result.text,","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"}],"initialDiff":null,"initialDiffFrom":"26.7.12","initialDiffTo":"26.7.13","summary":"The plugin accesses all files in your vault and reads at least one vault file through Obsidian’s file adapter, so it has broad local file visibility. For syncing, it can send data to a CouchDB server and can retrieve data from a URL determined at runtime, which means its network target can change based on configuration or server-driven behavior.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <=3.1.3","severity":"high","title":"fast-uri vulnerable to host confusion via literal backslash authority delimiter","advisoryUrl":"https://github.com/advisories/GHSA-v2hh-gcrm-f6hx","ghsaId":"GHSA-v2hh-gcrm-f6hx","cveId":null,"vulnerableRange":">=3.0.0 <=3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null

MDFriday Sync