if (!activeFile) {","explanation":"Retrieves a file from the vault using a previously saved file path","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/Devon22/obsidian-mediaviewer/blob/2.0.9/src/fullscreen.ts#L57"},{"id":797740,"pluginId":"mediaviewer","version":"2.0.9","category":"permissions_scope","severity":"info","filePath":"src/galleryBlock.ts","lineNumber":1684,"codeSnippet":"this.app.fileManager.renameFile","explanation":"Accesses Obsidian API: app.fileManager","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/Devon22/obsidian-mediaviewer/blob/2.0.9/src/galleryBlock.ts#L1684"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"mediaviewer","fromVersion":"2.0.8","toVersion":"2.0.9","files":[{"path":"src/galleryBlock.ts","hunks":"$21","securityAnnotations":[{"lineNumber":1684,"type":"new_finding","finding":{"category":"permissions_scope","severity":"info","filePath":"src/galleryBlock.ts","lineNumber":1684,"codeSnippet":"this.app.fileManager.renameFile","explanation":"Accesses Obsidian API: app.fileManager","sourceUrl":"https://github.com/Devon22/obsidian-mediaviewer/blob/2.0.9/src/galleryBlock.ts#L1684"}}]},{"path":"src/translations.ts","hunks":"$22","securityAnnotations":[]}],"securityDelta":{"newFindings":[{"category":"permissions_scope","severity":"info","filePath":"src/galleryBlock.ts","lineNumber":1684,"codeSnippet":"this.app.fileManager.renameFile","explanation":"Accesses Obsidian API: app.fileManager","sourceUrl":"https://github.com/Devon22/obsidian-mediaviewer/blob/2.0.9/src/galleryBlock.ts#L1684"}],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"2.0.8","initialDiffTo":"2.0.9","summary":"The mediaviewer plugin accesses media files stored in your Obsidian vault by retrieving them using previously saved file paths. It performs no network communication and contains no code obfuscation. All file access and viewing operations remain local to your vault with no external data transmission.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-w

Media Viewer