":false,"sourceUrl":"https://github.com/hasanyilmaz/operon/blob/refs/tags/2.6.0/src/ui/embedded-markdown-source-editor.ts#L317"},{"id":1154483,"pluginId":"operon","version":"2.6.0","category":"permissions_scope","severity":"info","filePath":"src/ui/embedded-markdown-source-editor.ts","lineNumber":365,"codeSnippet":"this.app.keymap.pushScope","explanation":"Accesses Obsidian API: app.keymap","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/hasanyilmaz/operon/blob/refs/tags/2.6.0/src/ui/embedded-markdown-source-editor.ts#L365"}],"factors":null,"networkEndpoints":[{"host":"","url":null,"filePath":"src/core/locale-pack-manager.ts","lineNumber":400,"codeSnippet":" 397 | \n 398 | async function fetchLocalePack(url: string): Promise {\n 399 | \ttry {\n> 400 | \t\tconst response = await requestUrl({ url, throw: false });\n 401 | \t\treturn { status: response.status, text: response.text };\n 402 | \t} catch (error) {\n 403 | \t\tthrow new LocalePackError(`Language pack download failed: ${getErrorMessage(error)}`, 'network');","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/core/reminder-sound-pack-manager.ts","lineNumber":326,"codeSnippet":" 323 | }\n 324 | \n 325 | async function fetchReminderSoundAsset(url: string): Promise {\n> 326 | \tconst response = await requestUrl({ url, throw: false });\n 327 | \treturn { status: response.status, arrayBuffer: response.arrayBuffer };\n 328 | }\n 329 | ","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/systems/external-calendar-ics.ts","lineNumber":51,"codeSnippet":" 48 | \tconst headers: Record = {};\n 49 | \tif (cached?.etag) headers['If-None-Match'] = cached.etag;\n 50 | \tif (cached?.lastModified) headers['If-Modified-Since'] = cached.lastModified;\n> 51 | \tconst response = await requestUrl({\n 52 | \t\turl: normalizeExternalCalendarUrl(url),\n 53 | \t\theaders,\n 54 | \t\tthrow: false,","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"2.5.0","initialDiffTo":"2.6.0","summary":"Operon reads markdown content from your vault, including all markdown files and at least one file through Obsidian’s vault adapter, to power its task, table, calendar, and board views. It also retrieves data from a configured endpoint, and it can retrieve data from a URL determined at runtime, so some features may rely on external network requests.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate a