gnOut(apiBaseUrl: string, sessionToken: string): Promise {\n> 211 | await requestUrl({\n 212 | url: `${stripTrailingSlash(apiBaseUrl)}/api/auth/sign-out`,\n 213 | method: \"POST\",\n 214 | throw: false,","networkType":"active-outbound","sendsData":true,"dataDescription":"Sends data to a destination that could not be determined from the source code.","endpointSource":"unresolved"},{"host":"","url":null,"filePath":"src/http/request.ts","lineNumber":22,"codeSnippet":" 19 | \n 20 | export class ObsidianHttpClient implements HttpClient {\n 21 | async request(input: HttpRequestInput): Promise {\n> 22 | return (await requestUrl({\n 23 | url: input.url,\n 24 | method: input.method ?? \"GET\",\n 25 | throw: false,","networkType":"active-outbound","sendsData":true,"dataDescription":"Makes network requests","endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/sync/remote/realtime-client.ts","lineNumber":44,"codeSnippet":" 41 | \n 42 | constructor(\n 43 | private readonly webSocketFactory: WebSocketFactory = {\n> 44 | create: (url, protocols) => new WebSocket(url, protocols),\n 45 | },\n 46 | options: Partial = {},\n 47 | ) {","networkType":"active-outbound","sendsData":true,"dataDescription":"new WebSocket() opens a persistent network connection","endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"2.3.0","initialDiffTo":"2.4.0","summary":"Osync (Self-Hosted) can access all files in your vault and read a specific vault file by path, so it has broad local access to content it may need to sync. It opens a persistent WebSocket connection and makes network requests, so it can send data over the network while running. The source code does not clearly show where that network traffic goes, so the exact destination depends on how the plugin is set up.","dependencyVulnerabilities":[{"packageName":"esbuild","packageVersion":">=0.27.3 <0.28.1","severity":"low","title":"esbuild allows arbitrary file read when running the development server on Windows","advisoryUrl":"https://github.com/advisories/GHSA-g7r4-m6w7-qqqr","ghsaId":"GHSA-g7r4-m6w7-qqqr","cveId":null,"vulnerableRange":">=0.27.3 <0.28.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"postcss","packageVersion":"<=8.5.17","severity":"high","title":"PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure","advisoryUrl":"https://github.com/advisories/GHSA-r28c-9q8g-f849","ghsaId":"GHSA-r28c-9q8g-f849","cveId":null,"vulnerableRange":"<=8.5.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"postcss","packageVersion":"<=8.5.22","severity":"moderate","title":"PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset","advisoryUrl":"https://github.com/advisories/GHSA-fxqj-rqcc-2cmp","ghsaId":"GHSA-fxqj-rqcc-2cmp","cveId":null,"vulnerableRange":"<=8.5.22","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"vite","packageVersion":">=8.0.0 <=8.0.15","severity":"moderate","title":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows","advisoryUrl":"https://github.com/advisories/GHSA-v6wh-96g9-6wx3","ghsaId":"GHSA-v6wh-96g9-6wx3","cveId":null,"vulnerableRange":">=8.0.0 <=8.0.15","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"vite","packageVersion":">=8.0.0 <=8.0.15","severity":"high","title":"vite: `server.fs.deny` bypass on Windows alternate paths","advisoryUrl":"https://github.com/advisories/GHSA-fx2h-pf6j-xcff","ghsaId":"GHSA-fx2h-pf6j-xcff","cveId":null,"vulnerableRange":">=8.0.0 <=8.0.15","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":9,"directDeps":2,"transitiveDeps":0}}]]}]