thref: \"https://developer.spotify.com/dashboard/\",\n 25 | \t\t\ttext: \"Spotify Developer\",\n 26 | \t\t});\n 27 | \t\tconst ol = div.createEl(\"ol\");","networkType":"passive","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"},{"host":"open.spotify.com","url":"https://github.com/studiowebux/obsidian-spotify-link/blob/1.15.3/src/main.ts#L70","filePath":"src/main.ts","lineNumber":70,"codeSnippet":" 67 | \t\t\t.setDesc(\"Paste a Spotify track URL or bare track ID\")\n 68 | \t\t\t.addText((text) =>\n 69 | \t\t\t\ttext\n> 70 | \t\t\t\t\t.setPlaceholder(\"https://open.spotify.com/track/...\")\n 71 | \t\t\t\t\t.onChange((value) => { this.value = value; }),\n 72 | \t\t\t);\n 73 | \t\tnew Setting(contentEl).addButton((btn) =>","networkType":"passive","sendsData":false,"dataDescription":null,"endpointSource":"unresolved"}],"initialDiff":null,"initialDiffFrom":"1.15.2","initialDiffTo":"1.15.3","summary":"The plugin reads a single file from your Obsidian vault through the adapter, so it has limited local file access. It sends data to Spotify’s `accounts.spotify.com/api/token` endpoint and to `api.spotify.com/v1/me/player/currently-playing?additional_types=track,episode` to get your current playback information. If you’re authenticated with Spotify, it can use that network access to pull the song or episode you’re listening to and insert it into your note.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=5.0.0 <5.0.6","severity":"moderate","title":"brace-expansion: Large numeric range defeats documented `max` DoS protection","advisoryUrl":"https://github.com/advisories/GHSA-jxxr-4gwj-5jf2","ghsaId":"GHSA-jxxr-4gwj-5jf2","cveId":null,"vulnerableRange":">=5.0.0 <5.0.6","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=3.0.0 <5.0.7","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=3.0.0 <5.0.7","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.8","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=4.0.0 <5.0.8","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=4.0.0 <5.0.9","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=4.0.0 <5.0.9","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":">=0.27.3 <0.28.1","severity":"low","title":"esbuild allows arbitrary file read when running the development server on Windows","advisoryUrl":"https://github.com/advisories/GHSA-g7r4-m6w7-qqqr","ghsaId":"GHSA-g7r4-m6w7-qqqr","cveId":null,"vulnerableRange":">=0.27.3 <0.28.1","fixAvailable":"0.28.1","source":"npm-audit","isDirect":true,"path":null}],"auditMeta":{"source":"npm-audit","totalDeps":9,"directDeps":0,"transitiveDeps":0}}]]}]

Spotify Link