cognium-dev 3.189.0 → 3.190.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +16 -2
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -10777,6 +10777,11 @@ var DEFAULT_SOURCES = [
|
|
|
10777
10777
|
{ method: "get", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
|
|
10778
10778
|
{ method: "hget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
|
|
10779
10779
|
{ method: "mget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
|
|
10780
|
+
{ property: "nextUrl", object: "req", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10781
|
+
{ property: "nextUrl", object: "request", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10782
|
+
{ property: "snapshot", object: "route", type: "http_path", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10783
|
+
{ property: "paramMap", object: "route", type: "http_path", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10784
|
+
{ property: "queryParamMap", object: "route", type: "http_param", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10780
10785
|
{ property: "body", object: "event", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10781
10786
|
{ property: "queryStringParameters", object: "event", type: "http_query", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
10782
10787
|
{ property: "multiValueQueryStringParameters", object: "event", type: "http_query", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
|
|
@@ -24842,7 +24847,16 @@ var JS_TAINTED_PATTERNS = [
|
|
|
24842
24847
|
{ pattern: /\bevent\.multiValueQueryStringParameters\b/, type: "http_param" },
|
|
24843
24848
|
{ pattern: /\bevent\.pathParameters\b/, type: "http_path" },
|
|
24844
24849
|
{ pattern: /\bevent\.headers\b/, type: "http_header" },
|
|
24845
|
-
{ pattern: /\bevent\.multiValueHeaders\b/, type: "http_header" }
|
|
24850
|
+
{ pattern: /\bevent\.multiValueHeaders\b/, type: "http_header" },
|
|
24851
|
+
{ pattern: /\breq(?:uest)?\.nextUrl\b/, type: "http_body" },
|
|
24852
|
+
{ pattern: /\.searchParams\s*\.\s*get\b/, type: "http_param" },
|
|
24853
|
+
{ pattern: /\bevent\.params\b/, type: "http_path" },
|
|
24854
|
+
{ pattern: /\bevent\.url\b/, type: "http_body" },
|
|
24855
|
+
{ pattern: /\bevent\.request\b/, type: "http_body" },
|
|
24856
|
+
{ pattern: /\broute\.snapshot\.params\b/, type: "http_path" },
|
|
24857
|
+
{ pattern: /\broute\.snapshot\.queryParams\b/, type: "http_param" },
|
|
24858
|
+
{ pattern: /\broute\.paramMap\b/, type: "http_path" },
|
|
24859
|
+
{ pattern: /\broute\.queryParamMap\b/, type: "http_param" }
|
|
24846
24860
|
];
|
|
24847
24861
|
var PYTHON_TAINTED_PATTERNS2 = [
|
|
24848
24862
|
{ pattern: /\brequest\.args\b/, type: "http_param" },
|
|
@@ -45953,7 +45967,7 @@ var colors = {
|
|
|
45953
45967
|
};
|
|
45954
45968
|
|
|
45955
45969
|
// src/version.ts
|
|
45956
|
-
var version = "3.
|
|
45970
|
+
var version = "3.190.0";
|
|
45957
45971
|
|
|
45958
45972
|
// src/formatters.ts
|
|
45959
45973
|
var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cognium-dev",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.190.0",
|
|
4
4
|
"description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -66,7 +66,7 @@
|
|
|
66
66
|
},
|
|
67
67
|
"dependencies": {
|
|
68
68
|
"@cognium/project-profile-detect": "^1.1.0",
|
|
69
|
-
"circle-ir": "^3.
|
|
69
|
+
"circle-ir": "^3.190.0"
|
|
70
70
|
},
|
|
71
71
|
"devDependencies": {
|
|
72
72
|
"@types/node": "^25.5.0",
|