| const res = await requestUrl(params);\n 64 | if (res.status >= 400) {\n 65 | throw new BaoError(res.status, res.text);\n 66 | }","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"},{"host":"","url":"http://localhost:${port}/oidc/callback","filePath":"src/providers/openbao/oidcLogin.ts","lineNumber":45,"codeSnippet":" 42 | const redirectUri = `http://localhost:${port}/oidc/callback`;\n 43 | \n 44 | // 1. Ask OpenBao for the IdP auth URL.\n> 45 | const authUrlRes = await requestUrl({\n 46 | url: `${opts.baseUrl.replace(/\\/+$/, \"\")}/v1/auth/oidc/oidc/auth_url`,\n 47 | method: \"POST\",\n 48 | headers: { \"Content-Type\": \"application/json\" },","networkType":"active-outbound","sendsData":true,"dataDescription":"Makes network requests","endpointSource":"user-configured"},{"host":"","url":null,"filePath":"src/providers/openbao/oidcLogin.ts","lineNumber":72,"codeSnippet":" 69 | \n 70 | // 4. Exchange the code for a Vault token.\n 71 | const params = new URLSearchParams({ state, code });\n> 72 | const cbRes = await requestUrl({\n 73 | url: `${opts.baseUrl.replace(/\\/+$/, \"\")}/v1/auth/oidc/oidc/callback?${params.toString()}`,\n 74 | method: \"GET\",\n 75 | throw: false,","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"}],"initialDiff":null,"initialDiffFrom":"0.7.1","initialDiffTo":"0.7.2","summary":"The plugin reads all markdown files in your vault so it can find placeholder values and replace them with secrets, and it decodes some base64-encoded strings with `atob()`. When configured, it can make network requests to a secret-management service such as OpenBao/Vault, 1Password Connect, or Bitwarden/Vaultwarden to fetch the real credential. The source also shows outbound network activity, but the exact destination of those requests wasn’t determined from the code.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severit

Secret Placeholders