return chunks[0];\r\n }\r\n }\r\n@@ -126,7 +124,6 @@ export class AudioChunker {\n const audioBuffer = await audioContext.decodeAudioData(arrayBuffer);\r\n return await this.bufferToBlob(audioContext, audioBuffer, mimeType);\r\n } catch (error) {\r\n- console.error('Error processing chunk:', error);\r\n return chunk;\r\n }\r\n }\r\n","securityAnnotations":[]},{"path":"src/utils/audio/AudioFileManager.ts","hunks":"@@ -62,7 +62,7 @@ export class AudioFileManager {\n try {\r\n await this.plugin.app.vault.adapter.remove(path);\r\n } catch (error) {\r\n- console.error(`Failed to remove temporary file ${path}:`, error);\r\n+ // Silent fail for cleanup\r\n }\r\n }\r\n }\r\n","securityAnnotations":[]},{"path":"src/utils/transcription/StreamingTranscriptionService.ts","hunks":"$23","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":-15}},"initialDiffFrom":"1.0.3","initialDiffTo":"1.0.4","summary":"The neurovox plugin modifies your vault by creating folders and sends voice transcription and note data to external endpoints via HTTP requests for AI processing. The plugin does not obfuscate its communication, so network traffic is unencrypted or readily inspectable. Given its voice transcription and AI capabilities, the plugin likely transmits audio or text data to third-party services for processing, which means sensitive note content could be exposed to external providers.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"axios","packageVersion":">=1.0.0 <1.12.0","severity":"high","title":"Axios is vulnerable to DoS attack through lack of data size check","advisoryUrl":"https://github.com/advisories/GHSA-4hjh-wcwx-xvwj","ghsaId":"GHSA-4hjh-wcwx-xvwj","cveId":null,"vulnerableRange":">=1.0.0 <1.12.0","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"axios","packageVersion":">=1.0.0 <=1.13.4","severity":"high","title":"Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig","advisoryUrl":"https://github.com/advisories/GHSA-43fc-jf86-j433","ghsaId":"GHSA-43fc-jf86-j433","cveId":null,"vulnerableRange":">=1.0.0 <=1.13.4","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulne

NeuroVox