cognium-dev 3.56.0 → 3.57.0

package/dist/cli.js

@@ -13622,6 +13622,27 @@ class ConstantPropagator {
       if (nameNode) {
         const varName = getNodeText2(nameNode, this.source);
         loopVarNames.add(varName);
+        const collectionNode = node.childForFieldName("value");
+        if (collectionNode) {
+          const collectionName = getNodeText2(collectionNode, this.source);
+          const scopedCollection = this.currentMethod ? `${this.currentMethod}:${collectionName}` : collectionName;
+          let elementIsTainted = this.tainted.has(collectionName) || this.tainted.has(scopedCollection);
+          if (!elementIsTainted) {
+            const taintedIndices = this.taintedArrayElements.get(collectionName);
+            if (taintedIndices && taintedIndices.size > 0)
+              elementIsTainted = true;
+          }
+          if (!elementIsTainted) {
+            const taintedKeys = this.taintedCollections.get(collectionName);
+            if (taintedKeys && taintedKeys.size > 0)
+              elementIsTainted = true;
+          }
+          if (elementIsTainted) {
+            const scopedVar = this.currentMethod ? `${this.currentMethod}:${varName}` : varName;
+            this.tainted.add(varName);
+            this.tainted.add(scopedVar);
+          }
+        }
       }
     }
     for (const varName of loopVarNames) {
@@ -14514,9 +14535,21 @@ class ConstantPropagator {
             this.taintedCollections.set(collectionName, new Set);
           }
           this.taintedCollections.get(collectionName).add(keyStr);
+          const scopedCollection = this.currentMethod ? `${this.currentMethod}:${collectionName}` : collectionName;
+          this.tainted.add(scopedCollection);
+          this.tainted.add(collectionName);
         }
       }
     }
+    if (methodName === "append" || methodName === "insert") {
+      const args2 = argsNode.children.filter((c) => c.type !== "(" && c.type !== ")" && c.type !== ",");
+      const valueArg = methodName === "insert" && args2.length >= 2 ? args2[1] : args2[0];
+      if (valueArg && this.isTaintedExpression(valueArg)) {
+        const scopedCollection = this.currentMethod ? `${this.currentMethod}:${collectionName}` : collectionName;
+        this.tainted.add(scopedCollection);
+        this.tainted.add(collectionName);
+      }
+    }
     if (methodName === "add" || methodName === "addLast") {
       const args2 = argsNode.children.filter((c) => c.type !== "(" && c.type !== ")" && c.type !== ",");
       if (args2.length >= 1) {
@@ -29990,7 +30023,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.56.0";
+var version = "3.57.0";
 
 // src/formatters.ts
 var SINK_SEVERITY = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.56.0",
+  "version": "3.57.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -65,7 +65,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "circle-ir": "^3.56.0"
+    "circle-ir": "^3.57.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",