":"src/main.ts","lineNumber":70,"codeSnippet":"this.app.vault.on","explanation":"Accesses Obsidian API: app.vault","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/pranavmangal/obsidian-single-file-daily-notes/blob/1.4.1/src/main.ts#L70"},{"id":911668,"pluginId":"single-file-daily-notes","version":"1.4.1","category":"vault_access","severity":"info","filePath":"src/main.ts","lineNumber":145,"codeSnippet":" 142 | if (view) {\n 143 | await view.leaf.setViewState({ type: \"markdown\", active: true });\n 144 | \n> 145 | const fileContent = await this.app.vault.read(file);\n 146 | const lines = fileContent.split(\"\\\\n\");\n 147 | \n 148 | const todayHeading = getTodayHeading(this.settings);","explanation":"Reads the contents of a file stored in the vault.","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/pranavmangal/obsidian-single-file-daily-notes/blob/1.4.1/src/main.ts#L145"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"single-file-daily-notes","fromVersion":"1.4.0","toVersion":"1.4.1","files":[{"path":"src/main.ts","hunks":"$20","securityAnnotations":[]},{"path":"src/ui/calendarView.tsx","hunks":"@@ -105,8 +105,6 @@ export class CalendarView extends ItemView {\n }\n \n async goToNote(file: TFile, index: number) {\n- this.plugin.skipCursorPositioning = true;\n-\n const tab = await this.openDailyNotesTab(file);\n await this.scrollToNote(tab, index);\n }\n","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":1}},"initialDiffFrom":"1.4.0","initialDiffTo":"1.4.1","summary":"This plugin reads and writes daily note entries within a single file stored in your Obsidian vault, accessing file contents through Obsidian's standard vault APIs. It performs no network communication and contains no obfuscation, meaning all its operations are local to your vault.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryUrl":"https://github.com/advisories/GHSA-mh29-5h37-fv8m","ghsaId":"GHSA-mh29-5h37-fv8m","cveId":null,"vulnerableRange":">=4.0.0 <4.1.1","fixAv

Single File Daily Notes