cognium-dev 3.188.0 → 3.190.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/cli.js +70 -3
  2. package/package.json +2 -2
package/dist/cli.js CHANGED
@@ -9558,7 +9558,24 @@ var GO_OPAQUE_CODEC_METHODS = new Set([
9558
9558
  "UnmarshalYAML",
9559
9559
  "UnmarshalJSON",
9560
9560
  "UnmarshalText",
9561
- "UnmarshalBinary"
9561
+ "UnmarshalBinary",
9562
+ "BindJSON",
9563
+ "ShouldBindJSON",
9564
+ "Bind",
9565
+ "ShouldBind",
9566
+ "BindQuery",
9567
+ "ShouldBindQuery",
9568
+ "BindUri",
9569
+ "ShouldBindUri",
9570
+ "BindXML",
9571
+ "ShouldBindXML",
9572
+ "BindYAML",
9573
+ "ShouldBindYAML",
9574
+ "BindHeader",
9575
+ "ShouldBindHeader",
9576
+ "BodyParser",
9577
+ "QueryParser",
9578
+ "ParamsParser"
9562
9579
  ]);
9563
9580
  function recordGoOpaqueCodecDestDef(call, defs, scopeStack) {
9564
9581
  const fn = call.childForFieldName("function");
@@ -10694,6 +10711,42 @@ var DEFAULT_SOURCES = [
10694
10711
  { method_annotation: "GraphQLMutation", type: "http_body", severity: "high", languages: ["java"] },
10695
10712
  { annotation: "InputArgument", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10696
10713
  { annotation: "GraphQLArgument", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10714
+ { method: "Query", class: "Context", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10715
+ { method: "Param", class: "Context", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10716
+ { method: "PostForm", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10717
+ { method: "GetHeader", class: "Context", type: "http_header", severity: "high", return_tainted: true, languages: ["go"] },
10718
+ { method: "Cookie", class: "Context", type: "http_cookie", severity: "high", return_tainted: true, languages: ["go"] },
10719
+ { method: "FormFile", class: "Context", type: "file_input", severity: "high", return_tainted: true, languages: ["go"] },
10720
+ { method: "BindJSON", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10721
+ { method: "ShouldBindJSON", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10722
+ { method: "Bind", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10723
+ { method: "BindQuery", class: "Context", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10724
+ { method: "ShouldBindQuery", class: "Context", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10725
+ { method: "BindUri", class: "Context", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10726
+ { method: "ShouldBindUri", class: "Context", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10727
+ { method: "MultipartForm", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10728
+ { method: "QueryParam", class: "Context", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10729
+ { method: "QueryParams", class: "Context", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10730
+ { method: "FormValue", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10731
+ { method: "FormParams", class: "Context", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10732
+ { method: "FormFile", class: "Context", type: "file_input", severity: "high", return_tainted: true, languages: ["go"] },
10733
+ { method: "Query", class: "Ctx", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10734
+ { method: "Params", class: "Ctx", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10735
+ { method: "FormValue", class: "Ctx", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10736
+ { method: "FormFile", class: "Ctx", type: "file_input", severity: "high", return_tainted: true, languages: ["go"] },
10737
+ { method: "Cookies", class: "Ctx", type: "http_cookie", severity: "high", return_tainted: true, languages: ["go"] },
10738
+ { method: "Get", class: "Ctx", type: "http_header", severity: "high", return_tainted: true, languages: ["go"] },
10739
+ { method: "Body", class: "Ctx", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10740
+ { method: "BodyParser", class: "Ctx", type: "http_body", severity: "high", return_tainted: true, languages: ["go"] },
10741
+ { method: "QueryParser", class: "Ctx", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10742
+ { method: "ParamsParser", class: "Ctx", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10743
+ { method: "URLParam", class: "chi", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10744
+ { method: "URLParamFromCtx", class: "chi", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10745
+ { method: "Vars", class: "mux", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10746
+ { method: "Query", class: "Input", type: "http_param", severity: "high", return_tainted: true, languages: ["go"] },
10747
+ { method: "Param", class: "Input", type: "http_path", severity: "high", return_tainted: true, languages: ["go"] },
10748
+ { method: "Header", class: "Input", type: "http_header", severity: "high", return_tainted: true, languages: ["go"] },
10749
+ { method: "Cookie", class: "Input", type: "http_cookie", severity: "high", return_tainted: true, languages: ["go"] },
10697
10750
  { method: "invocation_metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["python"] },
10698
10751
  { method: "get", class: "Metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
10699
10752
  { method: "getMap", class: "Metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
@@ -10724,6 +10777,11 @@ var DEFAULT_SOURCES = [
10724
10777
  { method: "get", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
10725
10778
  { method: "hget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
10726
10779
  { method: "mget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
10780
+ { property: "nextUrl", object: "req", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10781
+ { property: "nextUrl", object: "request", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10782
+ { property: "snapshot", object: "route", type: "http_path", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10783
+ { property: "paramMap", object: "route", type: "http_path", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10784
+ { property: "queryParamMap", object: "route", type: "http_param", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10727
10785
  { property: "body", object: "event", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10728
10786
  { property: "queryStringParameters", object: "event", type: "http_query", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
10729
10787
  { property: "multiValueQueryStringParameters", object: "event", type: "http_query", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
@@ -24789,7 +24847,16 @@ var JS_TAINTED_PATTERNS = [
24789
24847
  { pattern: /\bevent\.multiValueQueryStringParameters\b/, type: "http_param" },
24790
24848
  { pattern: /\bevent\.pathParameters\b/, type: "http_path" },
24791
24849
  { pattern: /\bevent\.headers\b/, type: "http_header" },
24792
- { pattern: /\bevent\.multiValueHeaders\b/, type: "http_header" }
24850
+ { pattern: /\bevent\.multiValueHeaders\b/, type: "http_header" },
24851
+ { pattern: /\breq(?:uest)?\.nextUrl\b/, type: "http_body" },
24852
+ { pattern: /\.searchParams\s*\.\s*get\b/, type: "http_param" },
24853
+ { pattern: /\bevent\.params\b/, type: "http_path" },
24854
+ { pattern: /\bevent\.url\b/, type: "http_body" },
24855
+ { pattern: /\bevent\.request\b/, type: "http_body" },
24856
+ { pattern: /\broute\.snapshot\.params\b/, type: "http_path" },
24857
+ { pattern: /\broute\.snapshot\.queryParams\b/, type: "http_param" },
24858
+ { pattern: /\broute\.paramMap\b/, type: "http_path" },
24859
+ { pattern: /\broute\.queryParamMap\b/, type: "http_param" }
24793
24860
  ];
24794
24861
  var PYTHON_TAINTED_PATTERNS2 = [
24795
24862
  { pattern: /\brequest\.args\b/, type: "http_param" },
@@ -45900,7 +45967,7 @@ var colors = {
45900
45967
  };
45901
45968
 
45902
45969
  // src/version.ts
45903
- var version = "3.188.0";
45970
+ var version = "3.190.0";
45904
45971
 
45905
45972
  // src/formatters.ts
45906
45973
  var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "cognium-dev",
3
- "version": "3.188.0",
3
+ "version": "3.190.0",
4
4
  "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
66
66
  },
67
67
  "dependencies": {
68
68
  "@cognium/project-profile-detect": "^1.1.0",
69
- "circle-ir": "^3.188.0"
69
+ "circle-ir": "^3.190.0"
70
70
  },
71
71
  "devDependencies": {
72
72
  "@types/node": "^25.5.0",