{"host":"","url":null,"filePath":"src/calendarIntegration.ts","lineNumber":81,"codeSnippet":" 78 | \t\t\tconst auth = btoa(`${this.config.username}:${this.config.password}`);\n 79 | \t\t\tconst testUrl = this.buildCalendarBaseUrl();\n 80 | \n> 81 | \t\t\tawait requestUrl({\n 82 | \t\t\t\turl: testUrl,\n 83 | \t\t\t\tmethod: 'PROPFIND',\n 84 | \t\t\t\theaders: {","networkType":"active-outbound","sendsData":true,"dataDescription":"Sends data to a destination that could not be determined from the source code.","endpointSource":"unresolved"},{"host":"","url":null,"filePath":"src/calendarIntegration.ts","lineNumber":179,"codeSnippet":" 176 | \t\ttry {\n 177 | \t\t\tconst auth = btoa(`${this.config.username}:${this.config.password}`);\n 178 | \n> 179 | \t\t\tconst response = await requestUrl({\n 180 | \t\t\t\turl: eventPath,\n 181 | \t\t\t\tmethod: 'PUT',\n 182 | \t\t\t\theaders: {","networkType":"active-outbound","sendsData":true,"dataDescription":"Makes network requests","endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/calendarIntegration.ts","lineNumber":212,"codeSnippet":" 209 | \t\ttry {\n 210 | \t\t\tconst auth = btoa(`${this.config.username}:${this.config.password}`);\n 211 | \n> 212 | \t\t\tconst response = await requestUrl({\n 213 | \t\t\t\turl: eventPath,\n 214 | \t\t\t\tmethod: 'DELETE',\n 215 | \t\t\t\theaders: {","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"}],"initialDiff":null,"initialDiffFrom":"1.0.2","initialDiffTo":"1.0.3","summary":"The plugin reads a single file from your vault by path, so its local data access appears limited to one specific note or config file. It also makes outbound network requests, and the source code shows that it sends data as part of those requests, though the exact destination could not be identified from the code. Because it includes CalDAV calendar integration, it can connect to a calendar service if configured, which is likely where the network activity is used.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"package

Pomodoro Calendar