cognium-dev 3.166.0 → 3.166.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/cli.js +4 -2
  2. package/package.json +2 -2
package/dist/cli.js CHANGED
@@ -19389,6 +19389,7 @@ var TAINT_FLOW_RULE_IDS = new Set([
19389
19389
  "mybatis_mapper_call",
19390
19390
  "external_taint_escape",
19391
19391
  "template_injection",
19392
+ "xml_entity_expansion",
19392
19393
  "sql-injection",
19393
19394
  "nosql-injection",
19394
19395
  "command-injection",
@@ -19401,7 +19402,8 @@ var TAINT_FLOW_RULE_IDS = new Set([
19401
19402
  "format-string",
19402
19403
  "mass-assignment",
19403
19404
  "template-injection",
19404
- "insecure-deserialization"
19405
+ "insecure-deserialization",
19406
+ "xml-entity-expansion"
19405
19407
  ]);
19406
19408
  function applyRequireEntryPath(fileAnalyses, options = {}) {
19407
19409
  const disabledSet = normalizeDisabled(options.disabledPasses);
@@ -44462,7 +44464,7 @@ var colors = {
44462
44464
  };
44463
44465
 
44464
44466
  // src/version.ts
44465
- var version = "3.166.0";
44467
+ var version = "3.166.1";
44466
44468
 
44467
44469
  // src/formatters.ts
44468
44470
  var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "cognium-dev",
3
- "version": "3.166.0",
3
+ "version": "3.166.1",
4
4
  "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
66
66
  },
67
67
  "dependencies": {
68
68
  "@cognium/project-profile-detect": "^1.1.0",
69
- "circle-ir": "^3.166.0"
69
+ "circle-ir": "^3.166.1"
70
70
  },
71
71
  "devDependencies": {
72
72
  "@types/node": "^25.5.0",