imageCache: new Map(),\n+ lastFrontmatter: new Map(),\n bannerStateCache: new Map(),\n SHUFFLE_CACHE_AGE: 3600000,\n UPDATE_MODE: {\n","securityAnnotations":[]},{"path":"tests/unit/core/settings.simple.test.js","hunks":"$22","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"3.6.17","initialDiffTo":"3.6.18","summary":"The plugin scans your vault's image files to look up banners by path and identify duplicates. It authenticates with and requests assets from multiple image APIs (Pexels, Pixabay, Flickr, Unsplash), retrieves available AI image generation models from a remote service, validates image URLs over the network, and sends temporary image files to a remote server along with your email. The plugin includes base64 decoding, suggesting configuration or credentials are encoded for storage.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.0.3","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":">=2.0.0 <2.0.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.5","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":">=4.0.0 <5.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"happy-dom","packageVersion":"<20.8.9","severity":"high","title":"Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies","advisoryUrl":"https://github.com/advisories/GHSA-w4gp-fjgq-3q4g","ghsaId":"GHSA-w4gp-fjgq-3q4g","cveId":null,"vulnerableRange":"<20.8.9","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"happy-dom","packageVersion":">=15.10.0 <=20.8.7","severity":"high","title":"Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code","advisoryUrl":"https://github.com/advisories/GHSA-6q6h-j7hj-3r64","ghsaId":"GHSA-6q6h-j7hj-3r64","cveId":null,"vulnerableRange":">=15.10.0 <=20.8.7","fixAvailable":null,"source":"npm-audit","isDirect":true,"path":null},{"packageName":"picomatch","packageVersion":">=4.0.0 <4.0.4","severity":"moderate","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","advisoryUrl":"https://github.com/advisories/GHSA-3v7f-55p6-f55p","ghsaId":"GHSA-3v7f-55p6-f55p","cveId":null,"vulnerableRange":">=4.0.0 <4.0.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"picomatch","packageVersion":">=4.0.0 <4.0.4","severity":"high","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","advisoryUrl":"https://github.com/advisories/GHSA-c2c7-rcm5-vvqj","ghsaId":"GHSA-c2c7-rcm5-vvqj","cveId":null,"vulnerableRange":">=4.0.0 <4.0.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":13,"directDeps":0,"transitiveDeps":0}}]]}]

Pixel Banner