utils/typeGuards.ts#L114"}],"factors":null,"networkEndpoints":[{"host":"","url":null,"filePath":"src/services/content/FeatureImageContentProvider.ts","lineNumber":481,"codeSnippet":" 478 | \n 479 | try {\n 480 | // `requestUrl` does not accept an AbortSignal, so we use Promise.race with a timer and ignore late results.\n> 481 | const rawPromise = requestUrl(request);\n 482 | const requestPromise = rawPromise\n 483 | .then(response => response)\n 484 | .catch(() => null)","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/services/content/FeatureImageContentProvider.ts","lineNumber":677,"codeSnippet":" 674 | return existing;\n 675 | }\n 676 | \n> 677 | const promise = request().finally(() => {\n 678 | this.thumbnailRuntime.inFlightDownloads.delete(key);\n 679 | });\n 680 | ","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"},{"host":"api.github.com","url":null,"filePath":"src/services/ReleaseCheckService.ts","lineNumber":128,"codeSnippet":" 125 | * Returns null if the request fails, or if the release is a draft or prerelease.\n 126 | */\n 127 | private async fetchLatestRelease(): Promise {\n> 128 | const response = await requestUrl({\n 129 | url: NOTEBOOK_NAVIGATOR_RELEASE_CHECK_URL,\n 130 | method: 'GET',\n 131 | headers: {","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"3.2.4","initialDiffTo":"3.3.0","summary":"The plugin reads one vault file by path and also has access to all files in your vault, which means it can browse or index your notes to build its file browser and calendar views. It sends a request to `api.github.com` to check the latest GitHub release. It can also send data to a configured endpoint or to a URL determined at runtime, depending on how it is set up or used.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"fast-uri","packageVersion":">=3.0.0 <3.1.5","severity":"high","title":"fast-uri vulnerable to host confusion via backslash authority introducer","advisoryUrl":"https://github.com/advisories/GHSA-7p8r-x3mc-p8w7","ghsaId":"GHSA-7p8r-x3mc-p8w7","cveId":n

Notebook Navigator