:27.000Z","artifactStatus":"divergent"},{"id":41321,"version":"1.0.3","score":100,"privacyLevel":null,"analyzedAt":"2025-03-07T16:52:47.000Z","releaseDate":"2025-03-07T16:52:47.000Z","artifactStatus":"divergent"},{"id":41320,"version":"1.0.2","score":100,"privacyLevel":null,"analyzedAt":"2025-03-06T11:57:26.000Z","releaseDate":"2025-03-06T11:57:26.000Z","artifactStatus":"verified"},{"id":41319,"version":"1.0.1","score":100,"privacyLevel":null,"analyzedAt":"2025-03-05T22:11:17.000Z","releaseDate":"2025-03-05T22:11:17.000Z","artifactStatus":"verified"},{"id":41318,"version":"1.0.0","score":100,"privacyLevel":null,"analyzedAt":"2025-03-05T12:25:35.000Z","releaseDate":"2025-03-05T12:25:35.000Z","artifactStatus":"verified"}],"findings":[{"id":918594,"pluginId":"smooth-cursor","version":"2.0.6","category":"permissions_scope","severity":"info","filePath":"src/main.ts","lineNumber":100,"codeSnippet":"this.app.workspace.onLayoutReady","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/busyoGG/SmoothCursor/blob/2.0.6/src/main.ts#L100"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"smooth-cursor","fromVersion":"2.0.5","toVersion":"2.0.6","files":[{"path":"src/main.ts","hunks":"$21","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"2.0.5","initialDiffTo":"2.0.6","summary":"This plugin smooths cursor movement in Obsidian's editor interface and does not access any Obsidian APIs or user data. It performs no network communication and contains no obfuscated code. The plugin operates entirely as a local UI enhancement without data collection or external connectivity.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisory

Smooth Cursor