diff --git a/javascript/ql/src/experimental/Security/CWE-522-DecompressionBombs/CommandLineSource.qll b/javascript/ql/src/experimental/Security/CWE-522-DecompressionBombs/CommandLineSource.qll index dfa10d2ccdf..f163375e578 100644 --- a/javascript/ql/src/experimental/Security/CWE-522-DecompressionBombs/CommandLineSource.qll +++ b/javascript/ql/src/experimental/Security/CWE-522-DecompressionBombs/CommandLineSource.qll @@ -11,8 +11,8 @@ abstract class CommandLineFlowSource extends API::Node { } class Yargs extends CommandLineFlowSource { Yargs() { - this = API::moduleImport("yargs/yargs").getASuccessor().getMember("argv") or - this = API::moduleImport("yargs/yargs").getASuccessor().getMember("argv").getAMember() + this = API::moduleImport("yargs/yargs").getASuccessor*().getMember("argv") or + this = API::moduleImport("yargs/yargs").getASuccessor*().getMember("argv").getAMember() } }