add change notes

This commit is contained in:
haby0
2021-05-17 14:52:05 +08:00
parent 60fc607449
commit 58d774ae85
5 changed files with 13 additions and 32 deletions

View File

@@ -0,0 +1,3 @@
lgtm,codescanning
* The "Deserialization of user-controlled data" (`java/unsafe-deserialization`) query
now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `HessianBurlap`, `Castor`, `Burlap` deserialization.