cognium-dev 3.199.0 → 3.200.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/cli.js +18 -1
  2. package/package.json +2 -2
package/dist/cli.js CHANGED
@@ -10539,6 +10539,18 @@ var DEFAULT_SOURCES = [
10539
10539
  { annotation: "FormParam", type: "http_param", severity: "high", param_tainted: true },
10540
10540
  { annotation: "PathParam", type: "http_path", severity: "medium", param_tainted: true },
10541
10541
  { annotation: "HeaderParam", type: "http_header", severity: "high", param_tainted: true },
10542
+ { annotation: "CookieParam", type: "http_cookie", severity: "high", param_tainted: true, languages: ["java"] },
10543
+ { annotation: "MatrixParam", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10544
+ { annotation: "BeanParam", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
10545
+ { annotation: "QueryValue", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10546
+ { annotation: "Part", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
10547
+ { annotation: "RequestBean", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
10548
+ { annotation: "RestQuery", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10549
+ { annotation: "RestPath", type: "http_path", severity: "medium", param_tainted: true, languages: ["java"] },
10550
+ { annotation: "RestHeader", type: "http_header", severity: "high", param_tainted: true, languages: ["java"] },
10551
+ { annotation: "RestForm", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10552
+ { annotation: "RestCookie", type: "http_cookie", severity: "high", param_tainted: true, languages: ["java"] },
10553
+ { annotation: "RestMatrix", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
10542
10554
  { method_annotation: "DataBoundConstructor", type: "http_param", severity: "high" },
10543
10555
  { method: "getenv", class: "System", type: "env_input", severity: "medium", return_tainted: true },
10544
10556
  { method: "getProperty", class: "System", type: "env_input", severity: "medium", return_tainted: true },
@@ -11608,6 +11620,10 @@ var DEFAULT_SINKS = [
11608
11620
  { method: "each", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
11609
11621
  { method: "get", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
11610
11622
  { method: "exec", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
11623
+ { method: "andWhere", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
11624
+ { method: "orWhere", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
11625
+ { method: "andHaving", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
11626
+ { method: "orHaving", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
11611
11627
  { method: "setAttribute", type: "xss", cwe: "CWE-79", severity: "high", arg_positions: [1] },
11612
11628
  { method: "bypassSecurityTrustHtml", type: "xss", cwe: "CWE-79", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
11613
11629
  { method: "bypassSecurityTrustScript", type: "xss", cwe: "CWE-79", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"] },
@@ -11727,6 +11743,7 @@ var DEFAULT_SINKS = [
11727
11743
  { method: "executemany", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
11728
11744
  { method: "raw", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
11729
11745
  { method: "extra", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["python"] },
11746
+ { method: "RawSQL", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
11730
11747
  { method: "open", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0], languages: ["python"] },
11731
11748
  { method: "remove", class: "os", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0] },
11732
11749
  { method: "unlink", class: "os", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0] },
@@ -46494,7 +46511,7 @@ var colors = {
46494
46511
  };
46495
46512
 
46496
46513
  // src/version.ts
46497
- var version = "3.199.0";
46514
+ var version = "3.200.0";
46498
46515
 
46499
46516
  // src/formatters.ts
46500
46517
  var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "cognium-dev",
3
- "version": "3.199.0",
3
+ "version": "3.200.0",
4
4
  "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
66
66
  },
67
67
  "dependencies": {
68
68
  "@cognium/project-profile-detect": "^1.1.0",
69
- "circle-ir": "^3.199.0"
69
+ "circle-ir": "^3.200.0"
70
70
  },
71
71
  "devDependencies": {
72
72
  "@types/node": "^25.5.0",