toSettingsPayload(\n 67 | \t\t\t\t\tthis.app.metadataCache.getFileCache(file)?.frontmatter?.[","explanation":"Reads a single vault file (cached)","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/erikars/task-list-kanban/blob/refs/tags/2.13.0/src/entry.ts#L64"},{"id":1187567,"pluginId":"task-list-kanban","version":"2.13.0","category":"permissions_scope","severity":"info","filePath":"src/ui/boards/rename_board_modal.ts","lineNumber":32,"codeSnippet":"app.fileManager.renameFile","explanation":"Accesses Obsidian API: app.fileManager","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/erikars/task-list-kanban/blob/refs/tags/2.13.0/src/ui/boards/rename_board_modal.ts#L32"},{"id":1187568,"pluginId":"task-list-kanban","version":"2.13.0","category":"filesystem_access","severity":"high","filePath":"src/ui/views/saved_views.ts","lineNumber":9,"codeSnippet":"\"../settings/settings_store\"","explanation":"Filesystem access with path traversal pattern detected: \"../settings/settings_store\". This plugin constructs paths that navigate outside its expected directory.","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/erikars/task-list-kanban/blob/refs/tags/2.13.0/src/ui/views/saved_views.ts#L9"}],"factors":null,"networkEndpoints":[],"initialDiff":null,"initialDiffFrom":"2.12.0","initialDiffTo":"2.13.0","summary":"Task List Kanban reads all markdown files in your vault and also reads individual vault files from cache when needed, using that local content to build a kanban view of tasks. No network activity was observed in the reviewed version, so it does not send data to any remote service.","dependencyVulnerabilities":[{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.2","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":">=2.0.0 <2.1.2","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.16","severity":"high","title":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups","advisoryUrl":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","ghsaId":"GHSA-3jxr-9vmj-r5cp","cveId":null,"vulnerableRange":"<1.1.16","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.17","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":"<1.1.17","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.3","severity":"high","title":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash","advisoryUrl":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","ghsaId":"GHSA-mh99-v99m-4gvg","cveId":null,"vulnerableRange":">=2.0.0 <2.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=2.0.0 <2.1.4","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":">=2.0.0 <2.1.4","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.18","severity":"high","title":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation","advisoryUrl":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","ghsaId":"GHSA-rgw5-rvv9-x895","cveId":null,"vulnerableRange":"<1.1.18","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageNam