cognium-dev 4.13.1 → 4.13.2

package/dist/cli.js

@@ -34356,8 +34356,7 @@ class CSharpCredit {
     }
     if (tainted.size === 0)
       return false;
-    const call = withoutStringLiterals(this.sinkText(sinkLine));
-    const rest = this.withoutSanitizerCalls(type, lastCallArguments(call) ?? call);
+    const rest = this.withoutSanitizerCalls(type, this.receivedOperands(type, sinkLine));
     if (this.builtinSanitizes(type, rest))
       return false;
     for (const v of tainted)
@@ -34365,6 +34364,23 @@ class CSharpCredit {
         return true;
     return false;
   }
+  receivedOperands(type, sinkLine) {
+    const text = withoutStringLiterals(this.sinkText(sinkLine)).replace(/\s*;?\s*(?:\/\/.*)?$/, "");
+    const property = /^\s*[A-Za-z_][\w.]*\.[A-Za-z_]\w*\s*=(?!=)\s*(.*)$/.exec(text);
+    if (property)
+      return property[1];
+    if (!text.endsWith(")"))
+      return text;
+    const args2 = lastCallArguments(text);
+    if (args2 === null)
+      return text;
+    const open = text.length - args2.length - 2;
+    const callStart = text.slice(0, open).search(/[A-Za-z_][\w.]*\s*$/);
+    const lastCall = callStart < 0 ? "" : text.slice(callStart);
+    if (lastCall && this.withoutSanitizerCalls(type, lastCall).trim() === "")
+      return text;
+    return args2;
+  }
   withoutSanitizerCalls(type, text) {
     const res = [];
     for (const { re, type: t } of CSHARP_SANITIZER_RES)
@@ -51970,7 +51986,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "4.13.1";
+var version = "4.13.2";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
@@ -52522,8 +52538,8 @@ function generateSarifResults(results, crossFileData) {
 
 // src/build-info.ts
 var buildInfo = {
-  gitSha: "51b2da7",
-  builtAt: "2026-10-08T18:47:29.958Z"
+  gitSha: "3937b7b",
+  builtAt: "2026-10-08T19:28:03.582Z"
 };
 
 // src/utils/args.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "4.13.1",
+  "version": "4.13.2",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "bin": {
     "cognium-dev": "dist/cli.js"
@@ -65,7 +65,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "1.1.2",
-    "circle-ir": "4.13.1"
+    "circle-ir": "4.13.2"
   },
   "devDependencies": {
     "@types/node": "^26.6.4",