add change note

This commit is contained in:
Erik Krogh Kristensen
2020-12-16 15:10:03 +01:00
parent 99af484042
commit 94e07bb91c

View File

@@ -0,0 +1,9 @@
lgtm,codescanning
* The `js/indirect-command-line-injection` query now supports more command-line parsing libraries.
Affected packages are
[arg](https://www.npmjs.com/package/arg),
[argparse](https://www.npmjs.com/package/argparse),
[command-line-args](https://www.npmjs.com/package/command-line-args),
[meow](https://www.npmjs.com/package/meow),
[dashdash](https://www.npmjs.com/package/dashdash),
[commander](https://www.npmjs.com/package/commander).