| }\r","networkType":"passive","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"},{"host":"raw.githubusercontent.com","url":"https://github.com/jparkerweb/rich-foot/blob/1.13.0/src/settings.js#L767","filePath":"src/settings.js","lineNumber":767,"codeSnippet":" 764 | const exampleDiv = containerEl.createDiv({ cls: 'rich-foot-example' });\n 765 | exampleDiv.createEl('img', {\n 766 | attr: {\n> 767 | src: 'https://raw.githubusercontent.com/jparkerweb/rich-foot/refs/heads/main/rich-foot.jpg',\n 768 | alt: 'Rich Foot Example'\n 769 | }\n 770 | });","networkType":"passive","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"},{"host":"www.equilllabs.com","url":"https://github.com/jparkerweb/rich-foot/blob/1.13.0/src/modals.js#L28","filePath":"src/modals.js","lineNumber":28,"codeSnippet":" 25 | const promotionalLinks = contentEl.createEl('div', { cls: 'release-notes-promotional-links' });\r\n 26 | \r\n 27 | const equilllabsLink = promotionalLinks.createEl('a', {\r\n> 28 | href: 'https://www.equilllabs.com',\r\n 29 | target: '_blank',\r\n 30 | });\r\n 31 | equilllabsLink.createEl('img', {\r","networkType":"passive","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"1.12.0","initialDiffTo":"1.13.0","summary":"Rich Foot reads local vault data to add backlink tags and created/modified dates to note footers; it demonstrably reads one vault file from cache and can access all files in your vault to assemble backlink information. It does not perform any network activity, and there is no evidence that it sends data anywhere. In other words, its behavior is limited to local vault access unless you change its configuration or trigger it in a way that changes how it operates.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=3.0.0 <5.0.7","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=3.0.0 <5.0.7","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high"