sion":"0.3.7","score":100,"privacyLevel":null,"analyzedAt":"2025-06-05T10:22:27.000Z","releaseDate":"2025-06-05T10:22:27.000Z","artifactStatus":"verified"},{"id":45520,"version":"0.3.5","score":100,"privacyLevel":null,"analyzedAt":"2025-06-04T21:37:14.000Z","releaseDate":"2025-06-04T21:37:14.000Z","artifactStatus":"verified"},{"id":45519,"version":"0.3.4","score":100,"privacyLevel":null,"analyzedAt":"2025-06-04T21:23:11.000Z","releaseDate":"2025-06-04T21:23:11.000Z","artifactStatus":"verified"},{"id":45518,"version":"0.3.0","score":100,"privacyLevel":null,"analyzedAt":"2025-06-04T15:50:12.000Z","releaseDate":"2025-06-04T15:50:12.000Z","artifactStatus":"verified"}],"findings":[{"id":941166,"pluginId":"unlime","version":"0.4.0","category":"permissions_scope","severity":"info","filePath":"main.ts","lineNumber":46,"codeSnippet":"this.app.workspace.on","explanation":"Accesses Obsidian API: app.workspace","taintConfidence":null,"disclosed":false,"sourceUrl":"https://github.com/shandyba/obsidian-lime/blob/0.4.0/main.ts#L46"}],"factors":null,"networkEndpoints":[],"initialDiff":{"pluginId":"unlime","fromVersion":"0.3.8","toVersion":"0.4.0","files":[{"path":"main.js","hunks":"$21","securityAnnotations":[]},{"path":"main.ts","hunks":"$22","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"0.3.8","initialDiffTo":"0.4.0","summary":"The plugin provides a UI toggle to show or hide unlinked mentions within Obsidian's backlinks and outgoing links panels. It does not access vault data, make network requests, or employ code obfuscation. Its functionality is entirely confined to modifying the display of existing panel elements in the local Obsidian application.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":">=1.0.0 <=1.1.11","severity":"low","title":"brace-expansion Regular Expression Denial of Service vulnerability","advisoryUrl":"https://github.com/advisories/GHSA-v6h2-p8h4-qcjw","ghsaId":"GHSA-v6h2-p8h4-qcjw","cveId":null,"vulnerableRange":">=1.0.0 <=1.1.11","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"esbuild","packageVersion":"<=0.24.2","severity":"moderate","title":"esbuild enables any website to send any requests to the development server and read the response","advisoryUrl":"https://github.com/advisories/GHSA-67mh-4wv8-2f99","ghsaId":"GHSA-67mh-4wv8-2f99","cveId":null,"vulnerableRange":"<=0.24.2","fixAvailable":"0.28.0","source":"npm-audit","isDirect":true,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"js-yaml","packageVersion":">=4.0.0 <4.1.1","severity":"moderate","title":"js-yaml has prototype pollution in merge (<<)","advisoryU

UnLime