| \t} catch {\n 26 | \t\tnew Notice(t(\"noticeReadFailed\"));\n 27 | \t\treturn;","explanation":"Reads a single vault file","taintConfidence":"possible","disclosed":false,"sourceUrl":"https://github.com/l10n-dev/obsidian-plugin-ai-translator/blob/refs/tags/1.2.2/src/translator.ts#L24"}],"factors":null,"networkEndpoints":[{"host":"api.l10n.dev","url":null,"filePath":"src/TranslationService.ts","lineNumber":13,"codeSnippet":" 10 | \n 11 | export class TranslationService {\n 12 | \tstatic async getBalance(apiKey: string): Promise {\n> 13 | \t\tconst response = await requestUrl({\n 14 | \t\t\turl: `${API_BASE}/v2/balance`,\n 15 | \t\t\tmethod: \"GET\",\n 16 | \t\t\theaders: { \"X-API-Key\": apiKey },","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"hardcoded-url"},{"host":"api.l10n.dev","url":null,"filePath":"src/TranslationService.ts","lineNumber":25,"codeSnippet":" 22 | \t}\n 23 | \n 24 | \tstatic async predictLanguages(input: string): Promise {\n> 25 | \t\tconst response = await requestUrl({\n 26 | \t\t\turl: `${API_BASE}/v2/languages/predict?input=${encodeURIComponent(input)}&limit=10`,\n 27 | \t\t\tmethod: \"GET\",\n 28 | \t\t\tthrow: false,","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"hardcoded-url"},{"host":"api.l10n.dev","url":null,"filePath":"src/TranslationService.ts","lineNumber":39,"codeSnippet":" 36 | \t\tapiKey: string,\n 37 | \t\treq: TranslateRequest,\n 38 | \t): Promise {\n> 39 | \t\tconst response = await requestUrl({\n 40 | \t\t\turl: `${API_BASE}/v2/translate`,\n 41 | \t\t\tmethod: \"POST\",\n 42 | \t\t\theaders: {","networkType":"active-outbound","sendsData":true,"dataDescription":"requestUrl() makes a network request to api.l10n.dev (https://api.l10n.dev/v2/translate)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"1.2.1","initialDiffTo":"1.2.2","summary":"The plugin reads a single file from your vault and, when you trigger translation, can send that file’s contents to L10n.dev’s API at `api.l10n.dev` so it can return a translated version while preserving formatting. It also makes a network request to `https://api.l10n.dev/v2/balance`, which appears to check account or usage balance. In other words, the confirmed behavior is local file read plus outbound requests to L10n.dev’s translation service, not broad vault access or arbitrary network traffic.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":

L10n.dev - AI Translator