cognium-dev 3.199.0 → 3.201.0

package/dist/cli.js

@@ -10539,6 +10539,18 @@ var DEFAULT_SOURCES = [
   { annotation: "FormParam", type: "http_param", severity: "high", param_tainted: true },
   { annotation: "PathParam", type: "http_path", severity: "medium", param_tainted: true },
   { annotation: "HeaderParam", type: "http_header", severity: "high", param_tainted: true },
+  { annotation: "CookieParam", type: "http_cookie", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "MatrixParam", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "BeanParam", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "QueryValue", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "Part", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RequestBean", type: "http_body", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestQuery", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestPath", type: "http_path", severity: "medium", param_tainted: true, languages: ["java"] },
+  { annotation: "RestHeader", type: "http_header", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestForm", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestCookie", type: "http_cookie", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "RestMatrix", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
   { method_annotation: "DataBoundConstructor", type: "http_param", severity: "high" },
   { method: "getenv", class: "System", type: "env_input", severity: "medium", return_tainted: true },
   { method: "getProperty", class: "System", type: "env_input", severity: "medium", return_tainted: true },
@@ -11608,6 +11620,10 @@ var DEFAULT_SINKS = [
   { method: "each", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
   { method: "get", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
   { method: "exec", class: "Connection", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"], allow_unresolved_receiver: true },
+  { method: "andWhere", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "orWhere", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "andHaving", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "orHaving", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
   { method: "setAttribute", type: "xss", cwe: "CWE-79", severity: "high", arg_positions: [1] },
   { method: "bypassSecurityTrustHtml", type: "xss", cwe: "CWE-79", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
   { method: "bypassSecurityTrustScript", type: "xss", cwe: "CWE-79", severity: "critical", arg_positions: [0], languages: ["javascript", "typescript"] },
@@ -11727,6 +11743,7 @@ var DEFAULT_SINKS = [
   { method: "executemany", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
   { method: "raw", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
   { method: "extra", type: "sql_injection", cwe: "CWE-89", severity: "high", arg_positions: [0], languages: ["python"] },
+  { method: "RawSQL", type: "sql_injection", cwe: "CWE-89", severity: "critical", arg_positions: [0], languages: ["python"] },
   { method: "open", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0], languages: ["python"] },
   { method: "remove", class: "os", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0] },
   { method: "unlink", class: "os", type: "path_traversal", cwe: "CWE-22", severity: "high", arg_positions: [0] },
@@ -24471,6 +24488,10 @@ var JS_TAINTED_PATTERNS = [
   { pattern: /\blocation\.href\b/, type: "http_path" },
   { pattern: /\bdocument\.getElementById\b/, type: "dom_input" },
   { pattern: /\bdocument\.querySelector\b/, type: "dom_input" },
+  { pattern: /\bdocument\.getElementsByName\b/, type: "dom_input" },
+  { pattern: /\bdocument\.getElementsByClassName\b/, type: "dom_input" },
+  { pattern: /\bdocument\.getElementsByTagName\b/, type: "dom_input" },
+  { pattern: /\bdocument\.querySelectorAll\b/, type: "dom_input" },
   { pattern: /\b(?:event|e)\.(?:target\.)?value\b/, type: "dom_input" },
   { pattern: /\bdocument\.referrer\b/, type: "http_header" },
   { pattern: /\bdocument\.cookie\b/, type: "http_cookie" },
@@ -46494,7 +46515,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.199.0";
+var version = "3.201.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.199.0",
+  "version": "3.201.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.199.0"
+    "circle-ir": "^3.201.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",