cognium-dev 3.189.0 → 3.191.0

package/dist/cli.js

@@ -10665,6 +10665,14 @@ var DEFAULT_SOURCES = [
   { method: "text", class: "Request", type: "http_body", severity: "high", return_tainted: true },
   { property: "query", object: "request", type: "http_param", severity: "high", property_tainted: true },
   { property: "match_info", object: "request", type: "http_path", severity: "high", property_tainted: true },
+  { property: "rel_url", object: "request", type: "http_body", severity: "high", property_tainted: true },
+  { property: "remote", object: "request", type: "network_input", severity: "high", property_tainted: true },
+  { property: "raw_headers", object: "request", type: "http_header", severity: "high", property_tainted: true },
+  { property: "transport", object: "request", type: "network_input", severity: "medium", property_tainted: true },
+  { method: "get_json", class: "Request", type: "http_body", severity: "high", return_tainted: true },
+  { method: "get_data", class: "Request", type: "http_body", severity: "high", return_tainted: true },
+  { method: "form", class: "Request", type: "http_param", severity: "high", return_tainted: true },
+  { method: "files", class: "Request", type: "file_input", severity: "high", return_tainted: true },
   { method: "query_string", class: "HttpRequest", type: "http_param", severity: "high", return_tainted: true },
   { method: "match_info", class: "HttpRequest", type: "http_param", severity: "high", return_tainted: true },
   { method: "into_inner", class: "Path", type: "http_param", severity: "high", return_tainted: true },
@@ -10777,6 +10785,11 @@ var DEFAULT_SOURCES = [
   { method: "get", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
   { method: "hget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
   { method: "mget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
+  { property: "nextUrl", object: "req", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
+  { property: "nextUrl", object: "request", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
+  { property: "snapshot", object: "route", type: "http_path", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
+  { property: "paramMap", object: "route", type: "http_path", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
+  { property: "queryParamMap", object: "route", type: "http_param", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
   { property: "body", object: "event", type: "http_body", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
   { property: "queryStringParameters", object: "event", type: "http_query", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
   { property: "multiValueQueryStringParameters", object: "event", type: "http_query", severity: "high", property_tainted: true, languages: ["javascript", "typescript"] },
@@ -24842,7 +24855,16 @@ var JS_TAINTED_PATTERNS = [
   { pattern: /\bevent\.multiValueQueryStringParameters\b/, type: "http_param" },
   { pattern: /\bevent\.pathParameters\b/, type: "http_path" },
   { pattern: /\bevent\.headers\b/, type: "http_header" },
-  { pattern: /\bevent\.multiValueHeaders\b/, type: "http_header" }
+  { pattern: /\bevent\.multiValueHeaders\b/, type: "http_header" },
+  { pattern: /\breq(?:uest)?\.nextUrl\b/, type: "http_body" },
+  { pattern: /\.searchParams\s*\.\s*get\b/, type: "http_param" },
+  { pattern: /\bevent\.params\b/, type: "http_path" },
+  { pattern: /\bevent\.url\b/, type: "http_body" },
+  { pattern: /\bevent\.request\b/, type: "http_body" },
+  { pattern: /\broute\.snapshot\.params\b/, type: "http_path" },
+  { pattern: /\broute\.snapshot\.queryParams\b/, type: "http_param" },
+  { pattern: /\broute\.paramMap\b/, type: "http_path" },
+  { pattern: /\broute\.queryParamMap\b/, type: "http_param" }
 ];
 var PYTHON_TAINTED_PATTERNS2 = [
   { pattern: /\brequest\.args\b/, type: "http_param" },
@@ -24867,7 +24889,12 @@ var PYTHON_TAINTED_PATTERNS2 = [
   { pattern: /\binput\s*\(/, type: "io_input" },
   { pattern: /\.receive_text\s*\(/, type: "network_input" },
   { pattern: /\.receive_bytes\s*\(/, type: "network_input" },
-  { pattern: /\.receive_json\s*\(/, type: "http_body" }
+  { pattern: /\.receive_json\s*\(/, type: "http_body" },
+  { pattern: /\brequest\.rel_url\b/, type: "http_body" },
+  { pattern: /\brequest\.remote\b/, type: "network_input" },
+  { pattern: /\brequest\.match_info\b/, type: "http_path" },
+  { pattern: /\.get_json\s*\(/, type: "http_body" },
+  { pattern: /\.get_data\s*\(/, type: "http_body" }
 ];
 
 class LanguageSourcesPass {
@@ -45953,7 +45980,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.189.0";
+var version = "3.191.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.189.0",
+  "version": "3.191.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.189.0"
+    "circle-ir": "^3.191.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",