","lineNumber":301,"codeSnippet":" 298 | private async checkRequirements(showNotice: boolean): Promise {\n 299 | try {\n 300 | // Check if Ollama is running\n> 301 | const ollamaResponse = await fetch(`${this.settings.ollamaURL}/api/version`, {\n 302 | method: ''GET''\n 303 | });\n 304 | ","networkType":"active-inbound","sendsData":false,"dataDescription":null,"endpointSource":"user-configured"},{"host":"localhost","url":null,"filePath":"main.ts","lineNumber":370,"codeSnippet":" 367 | \n 368 | private async checkOllamaConnection(): Promise {\n 369 | try {\n> 370 | const response = await fetch(`${this.settings.ollamaURL}/api/embeddings`, {\n 371 | method: ''HEAD''\n 372 | });\n 373 | return response.ok;","networkType":"active-outbound","sendsData":true,"dataDescription":"Makes network requests to an endpoint you configure. No hardcoded destination URLs were found. (allowlisted)","endpointSource":"user-configured"}],"initialDiff":{"pluginId":"vector-search","fromVersion":"0.2.0","toVersion":"0.3.0","files":[{"path":"main.ts","hunks":"$21","securityAnnotations":[]}],"securityDelta":{"newFindings":[],"resolvedFindings":[],"scoreChange":0}},"initialDiffFrom":"0.2.0","initialDiffTo":"0.3.0","summary":"The vector-search plugin reads and chunks note contents from your vault, then sends that data to a locally configured Ollama server to generate semantic embeddings using the nomic-embed-text model. It performs outbound connectivity tests to verify the Ollama embeddings service is accessible before processing. The plugin has no code obfuscation and communicates only with the Ollama instance you explicitly configure—there are no external API calls or third-party services involved.","dependencyVulnerabilities":[{"packageName":"ajv","packageVersion":"<6.14.0","severity":"moderate","title":"ajv has ReDoS when using `$data` option","advisoryUrl":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","ghsaId":"GHSA-2g4f-4pwh-qvx6","cveId":null,"vulnerableRange":"<6.14.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"brace-expansion","packageVersion":"<1.1.13","severity":"moderate","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","advisoryUrl":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","ghsaId":"GHSA-f886-m6hf-6m8v","cveId":null,"vulnerableRange":"<1.1.13","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<3.4.0","severity":"high","title":"flatted vulnerable to unbounded recursion DoS in parse() revive phase","advisoryUrl":"https://github.com/advisories/GHSA-25h7-pfq9-p65f","ghsaId":"GHSA-25h7-pfq9-p65f","cveId":null,"vulnerableRange":"<3.4.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"flatted","packageVersion":"<=3.4.1","severity":"high","title":"Prototype Pollution via parse() in NodeJS flatted","advisoryUrl":"https://github.com/advisories/GHSA-rf6f-7fwh-wjgh","ghsaId":"GHSA-rf6f-7fwh-wjgh","cveId":null,"vulnerableRange":"<=3.4.1","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern","advisoryUrl":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","ghsaId":"GHSA-3ppc-4f35-3m26","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch","packageVersion":"<3.1.3","severity":"high","title":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","advisoryUrl":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","ghsaId":"GHSA-7r86-cg39-jmmj","cveId":null,"vulnerableRange":"<3.1.3","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"minimatch"

Vector Search