seDate":"2024-06-03T18:25:59.000Z","artifactStatus":"unavailable"},{"id":42278,"version":"1.0.2","score":100,"privacyLevel":null,"analyzedAt":"2024-06-03T17:32:30.000Z","releaseDate":"2024-06-03T17:32:30.000Z","artifactStatus":null},{"id":42277,"version":"1.0.1","score":100,"privacyLevel":null,"analyzedAt":"2024-06-03T04:36:09.000Z","releaseDate":"2024-06-03T04:36:09.000Z","artifactStatus":null},{"id":42276,"version":"1.0.0","score":100,"privacyLevel":null,"analyzedAt":"2024-06-03T01:07:24.000Z","releaseDate":"2024-06-03T01:07:24.000Z","artifactStatus":null}],"findings":[{"id":922852,"pluginId":"svelte-syntax-highlighter","version":"1.0.3","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":30,"codeSnippet":"this.app.workspace.updateOptions","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/typhoon-kim/obsidian-svelte-syntax-highlighter/blob/1.0.3/main.ts#L30"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"svelte-syntax-highlighter","fromVersion":"1.0.2","toVersion":"1.0.3","files":[],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"1.0.2","initialDiffTo":"1.0.3","summary":"The plugin adds syntax highlighting for Svelte code blocks in your Obsidian notes. It does not access any vault data or make network connections. All processing happens locally in your editor without sending information externally.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"cross-spawn","packageVersion":">=7.0.0 <7.0.5","severity":"high","title":"Regular Expression Denial of Service (ReDoS) in cross-spawn","advisoryUrl":"https://github.com/advisories/GHSA-3xgq-45jj-v275","ghsaId":"GHSA-3xgq-45jj-v275","cveId":null,"vulnerableRange":">=7.0.0 <7.0.5","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","

Svelte Syntax Highlighter