eFileName(fileName, mediaType);\n 41 | const createTask = await requestJson({\n> 42 | url: 'https://mineru.net/api/v1/agent/parse/file',\n 43 | method: 'POST',\n 44 | headers: { 'Content-Type': 'application/json' },\n 45 | body: JSON.stringify({","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets mineru.net (https://mineru.net/api/v1/agent/parse/file)","endpointSource":"hardcoded-url"},{"host":"mineru.net","url":"https://mineru.net/api/v1/agent/parse/${encodeURIComponent(taskId)}","filePath":"src/vision-ocr.ts","lineNumber":95,"codeSnippet":" 92 | async function pollMinerUTask(taskId: string): Promise {\n 93 | const url = `https://mineru.net/api/v1/agent/parse/${encodeURIComponent(taskId)}`;\n 94 | for (let attempt = 0; attempt < 80; attempt++) {\n> 95 | const result = await requestJson({ url, method: 'GET' }, '查询任务');\n 96 | const state = String(result.data?.state ?? '').toLowerCase();\n 97 | if (result.code !== 0) {\n 98 | throw new Error(`MinerU 查询任务失败：${result.msg ?? JSON.stringify(result)}`);","networkType":"active-outbound","sendsData":true,"dataDescription":"URL property targets mineru.net (https://mineru.net/api/v1/agent/parse/)","endpointSource":"hardcoded-url"}],"initialDiff":null,"initialDiffFrom":"2.0.6","initialDiffTo":"2.0.7","summary":"The plugin can read a single vault file by path and can also read all markdown files in your vault, so it has the ability to access both individual notes and broadly scan note content for its features. It can send data to configured external services including OpenAI, Anthropic, Google Generative Language, DeepSeek, Moonshot, Minimax, and mineru.net, and it makes requests to Crossref for journal and publication metadata. It can also receive data from a configured endpoint, and it decodes some built-in strings at runtime with base64.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","pac

Scholarium