add missing security severity

2026-04-30 19:26:02 +02:00 · 2022-05-03 14:19:36 +02:00
parent 7530923af3
commit 31a4de902e
1 changed files with 1 additions and 0 deletions
--- a/javascript/ql/src/Security/CWE-094/ExpressionInjection.ql
+++ b/javascript/ql/src/Security/CWE-094/ExpressionInjection.ql
@@ -4,6 +4,7 @@
 *              user to inject code into the GitHub action.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 9.3
 * @precision high
 * @id js/actions/injection
 * @tags actions