)?.textContent || \"\";\n 246 | const year = new Date(published).getFullYear();\n 247 | \n> 248 | return { title, authors, year, url: `https://arxiv.org/abs/${arxivId}` };\n 249 | } catch (error) {\n 250 | console.error(\"Failed to fetch arXiv metadata:\", error);\n 251 | return null;","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets arxiv.org (https://arxiv.org/abs/)","endpointSource":"user-configured"},{"host":"arxiv.org","url":"https://arxiv.org/abs/${id}","filePath":"main.ts","lineNumber":442,"codeSnippet":" 439 | const year = new Date(published).getFullYear();\n 440 | const id = entry.querySelector(\"id\")?.textContent?.match(/\\\\d{4}\\\\.\\\\d{4,5}/)?.[0] || \"\";\n 441 | \n> 442 | return { title, authors, year, url: `https://arxiv.org/abs/${id}` };\n 443 | });\n 444 | \n 445 | } catch (error) {","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets arxiv.org (https://arxiv.org/abs/)","endpointSource":"hardcoded-url"}],"initialDiff":{"pluginId":"papers","fromVersion":"1.0.0","toVersion":"1.0.1","files":[{"path":"main.ts","hunks":"$21","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":5}},"initialDiffFrom":"1.0.0","initialDiffTo":"1.0.1","summary":"The papers plugin retrieves and imports research papers by reading and modifying files in your Obsidian vault. It downloads PDF files from external websites and fetches metadata from external APIs, with network requests outbound to construct and generate URLs linking to paper resources. The plugin has direct access to modify your vault contents and actively communicates with external paper repositories and metadata services.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":

Papers