From 21bfaec0d3b3624fccbdd6a2f40c746842d3b703 Mon Sep 17 00:00:00 2001 From: Sauyon Lee Date: Tue, 12 May 2020 05:44:19 -0700 Subject: [PATCH] TaintedPath: Add change note for tempfiles --- change-notes/2020-05-12-tainted-path.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 change-notes/2020-05-12-tainted-path.md diff --git a/change-notes/2020-05-12-tainted-path.md b/change-notes/2020-05-12-tainted-path.md new file mode 100644 index 00000000000..ccd78ed7d1f --- /dev/null +++ b/change-notes/2020-05-12-tainted-path.md @@ -0,0 +1,4 @@ +lgtm,codescanning +* The queries "Uncontrolled data used in path expression" and "Arbitrary file write during zip + extraction ("zip slip")" have been improved to recognize more file APIs, which may lead to more + alerts.