n":"1.0.4","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T20:52:02.000Z","releaseDate":"2026-06-14T10:30:17.000Z","artifactStatus":null},{"id":113204,"version":"1.0.3","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T20:51:52.000Z","releaseDate":"2026-06-13T16:15:13.000Z","artifactStatus":null},{"id":113203,"version":"1.0.2","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T20:51:41.000Z","releaseDate":"2026-06-13T15:09:47.000Z","artifactStatus":null},{"id":113202,"version":"1.0.1","score":100,"privacyLevel":0,"analyzedAt":"2026-08-16T20:51:31.000Z","releaseDate":"2026-06-13T14:46:39.000Z","artifactStatus":null}],"findings":[{"id":1133278,"pluginId":"mdmenu","version":"1.0.5","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":55,"codeSnippet":"this.app.workspace.onLayoutReady","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/sandsaber/mdMenu/blob/refs/tags/1.0.5/src/main.ts#L55"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"1.0.4","initialDiffTo":"1.0.5","summary":"mdMenu is a local Markdown formatting toolbar: it can add or adjust formatting in the note you are currently editing, but it does not use Obsidian Vault APIs to read files directly. No network activity was observed, so it does not send data to any servers as part of its documented behavior.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=3.0.0 <5.0.7","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=3.0.0 <5.0.7","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisori