cognium-dev 3.23.3 → 3.23.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +13 -6
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -17343,16 +17343,23 @@ class PythonPlugin extends BaseLanguagePlugin {
|
|
|
17343
17343
|
argPositions: [0]
|
|
17344
17344
|
},
|
|
17345
17345
|
{
|
|
17346
|
-
method: "
|
|
17346
|
+
method: "load",
|
|
17347
17347
|
class: "yaml",
|
|
17348
17348
|
type: "deserialization",
|
|
17349
17349
|
cwe: "CWE-502",
|
|
17350
|
-
severity: "
|
|
17351
|
-
argPositions: [0]
|
|
17352
|
-
sanitizes: ["yaml_unsafe"]
|
|
17350
|
+
severity: "critical",
|
|
17351
|
+
argPositions: [0]
|
|
17353
17352
|
},
|
|
17354
17353
|
{
|
|
17355
|
-
method: "
|
|
17354
|
+
method: "unsafe_load",
|
|
17355
|
+
class: "yaml",
|
|
17356
|
+
type: "deserialization",
|
|
17357
|
+
cwe: "CWE-502",
|
|
17358
|
+
severity: "critical",
|
|
17359
|
+
argPositions: [0]
|
|
17360
|
+
},
|
|
17361
|
+
{
|
|
17362
|
+
method: "full_load",
|
|
17356
17363
|
class: "yaml",
|
|
17357
17364
|
type: "deserialization",
|
|
17358
17365
|
cwe: "CWE-502",
|
|
@@ -25735,7 +25742,7 @@ var colors = {
|
|
|
25735
25742
|
};
|
|
25736
25743
|
|
|
25737
25744
|
// src/version.ts
|
|
25738
|
-
var version = "3.23.
|
|
25745
|
+
var version = "3.23.5";
|
|
25739
25746
|
|
|
25740
25747
|
// src/formatters.ts
|
|
25741
25748
|
var SINK_SEVERITY = {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "cognium-dev",
|
|
3
|
-
"version": "3.23.
|
|
3
|
+
"version": "3.23.5",
|
|
4
4
|
"description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -65,7 +65,7 @@
|
|
|
65
65
|
"registry": "https://registry.npmjs.org/"
|
|
66
66
|
},
|
|
67
67
|
"dependencies": {
|
|
68
|
-
"circle-ir": "^3.23.
|
|
68
|
+
"circle-ir": "^3.23.5"
|
|
69
69
|
},
|
|
70
70
|
"devDependencies": {
|
|
71
71
|
"@types/node": "^25.5.0",
|