cognium-dev 3.198.0 → 3.200.0

package/dist/cli.js

@@ -3651,6 +3651,10 @@ function extractJavaScriptTypes(tree, cache) {
   for (const cls of classes) {
     types.push(extractJSClassInfo(cls));
   }
+  const interfaces = getNodesFromCache(tree.rootNode, "interface_declaration", cache);
+  for (const iface of interfaces) {
+    types.push(extractTSInterfaceInfo(iface));
+  }
   const functions = getNodesFromCache(tree.rootNode, "function_declaration", cache);
   if (functions.length > 0) {
     const moduleFunctions = [];
@@ -3997,6 +4001,76 @@ function extractSelfAssignments(body2, fields, fieldNames) {
     }
   }
 }
+function extractTSInterfaceInfo(node) {
+  const name2 = getIdentifier(node, "name") ?? "Anonymous";
+  const parents = [];
+  for (let i2 = 0;i2 < node.childCount; i2++) {
+    const child = node.child(i2);
+    if (!child || child.type !== "extends_type_clause")
+      continue;
+    for (let j = 0;j < child.childCount; j++) {
+      const gc = child.child(j);
+      if (!gc)
+        continue;
+      if (gc.type === "type_identifier" || gc.type === "generic_type" || gc.type === "nested_type_identifier") {
+        parents.push(getNodeText(gc));
+      }
+    }
+  }
+  const body2 = node.childForFieldName("body");
+  const methods = [];
+  const fields = [];
+  if (body2) {
+    for (let i2 = 0;i2 < body2.childCount; i2++) {
+      const member = body2.child(i2);
+      if (!member)
+        continue;
+      if (member.type === "method_signature") {
+        const methodName = getIdentifier(member, "name") ?? getNodeText(member.child(0) ?? member);
+        const params = member.childForFieldName("parameters");
+        const returnType = member.childForFieldName("return_type");
+        methods.push({
+          name: methodName,
+          return_type: returnType ? getNodeText(returnType).replace(/^:\s*/, "") : null,
+          parameters: params ? extractJSParameters(params) : [],
+          annotations: [],
+          modifiers: [],
+          start_line: member.startPosition.row + 1,
+          end_line: member.endPosition.row + 1
+        });
+        continue;
+      }
+      if (member.type === "property_signature") {
+        const fieldName = getIdentifier(member, "name") ?? getNodeText(member.child(0) ?? member);
+        const typeNode = member.childForFieldName("type");
+        const modifiers = [];
+        const text = getNodeText(member);
+        if (/^\s*readonly\b/.test(text))
+          modifiers.push("readonly");
+        if (/\?\s*:/.test(text))
+          modifiers.push("optional");
+        fields.push({
+          name: fieldName,
+          type: typeNode ? getNodeText(typeNode).replace(/^:\s*/, "") : null,
+          modifiers,
+          annotations: []
+        });
+      }
+    }
+  }
+  return {
+    name: name2,
+    kind: "interface",
+    package: null,
+    extends: parents[0] ?? null,
+    implements: parents.slice(1),
+    annotations: [],
+    methods,
+    fields,
+    start_line: node.startPosition.row + 1,
+    end_line: node.endPosition.row + 1
+  };
+}
 function extractJSClassInfo(node) {
   const name2 = getIdentifier(node, "name") ?? "Anonymous";
   let extendsType = null;
@@ -10465,6 +10539,18 @@ var DEFAULT_SOURCES = [
   { annotation: "FormParam", type: "http_param", severity: "high", param_tainted: true },
   { annotation: "PathParam", type: "http_path", severity: "medium", param_tainted: true },
   { annotation: "HeaderParam", type: "http_header", severity: "high", param_tainted: true },
+  { annotation: "CookieParam", type: "http_cookie", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "MatrixParam", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "BeanParam", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "QueryValue", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "Part", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RequestBean", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestQuery", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestPath", type: "http_path", severity: "medium", param_tainted: true, languages: ["java"] },
+  { annotation: "RestHeader", type: "http_header", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestForm", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestCookie", type: "http_cookie", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestMatrix", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
   { method_annotation: "DataBoundConstructor", type: "http_param", severity: "high" },
   { method: "getenv", class: "System", type: "env_input", severity: "medium", return_tainted: true },
   { method: "getProperty", class: "System", type: "env_input", severity: "medium", return_tainted: true },
@@ -11534,6 +11620,10 @@ var DEFAULT_SINKS = [
   { method: "each", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
   { method: "get", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
   { method: "exec", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
+  { method: "andWhere", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "orWhere", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "andHaving", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "orHaving", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
   { method: "setAttribute", type: "xss", cwe: "CWE-79", severity: "high", arg_positions: [1] },
   { method: "bypassSecurityTrustHtml", type: "xss", cwe: "CWE-79", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
   { method: "bypassSecurityTrustScript", type: "xss", cwe: "CWE-79", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"] },
@@ -11653,6 +11743,7 @@ var DEFAULT_SINKS = [
   { method: "executemany", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
   { method: "raw", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
   { method: "extra", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["python"] },
+  { method: "RawSQL", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
   { method: "open", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0], languages: ["python"] },
   { method: "remove", class: "os", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0] },
   { method: "unlink", class: "os", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0] },
@@ -46420,7 +46511,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.198.0";
+var version = "3.200.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
@@ -46456,7 +46547,11 @@ var SINK_SEVERITY = {
   format_string: "high",
   crlf: "medium",
   mass_assignment: "high",
-  prompt_injection: "high"
+  prompt_injection: "high",
+  insecure_storage: "medium",
+  prototype_pollution: "high",
+  regex_dos: "high",
+  unsafe_memory: "high"
 };
 var SINK_CWE = {
   sql_injection: "CWE-89",
@@ -46483,7 +46578,11 @@ var SINK_CWE = {
   format_string: "CWE-134",
   crlf: "CWE-113",
   mass_assignment: "CWE-915",
-  prompt_injection: "CWE-1427"
+  prompt_injection: "CWE-1427",
+  insecure_storage: "CWE-922",
+  prototype_pollution: "CWE-1321",
+  regex_dos: "CWE-1333",
+  unsafe_memory: "CWE-119"
 };
 var VULNERABILITY_HELP = {
   sql_injection: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.198.0",
+  "version": "3.200.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.198.0"
+    "circle-ir": "^3.200.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",