Napalys Klicius b9b62fa1c1 JS: Add URL from url package constructor taint step for request forgery detection

2025-05-30 18:32:02 +02:00

..

CWE-020

raw test output

2025-02-28 13:29:39 +01:00

CWE-022

Applied copilot suggestion.

2025-04-10 14:13:48 +02:00

CWE-073

raw test output

2025-02-28 13:29:39 +01:00

CWE-078

Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource

2025-05-01 11:14:15 +02:00

CWE-079

JS: Benign test updates

2025-05-02 11:09:19 +02:00

CWE-089

Add test case to ensure exec calls without middleware injection into Express are not flagged.

2025-03-30 14:09:15 +02:00

CWE-094

Added support for fastify.all

2025-04-30 14:54:09 +02:00

CWE-116

Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js

2025-03-10 14:19:33 +01:00

CWE-117

raw test output

2025-02-28 13:29:39 +01:00

CWE-134

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-178

raw test output

2025-02-28 13:29:39 +01:00

CWE-200

Applied copilot suggestions.

2025-03-28 13:19:11 +01:00

CWE-201

raw test output

2025-02-28 13:29:39 +01:00

CWE-209

raw test output

2025-02-28 13:29:39 +01:00

CWE-295

raw test output

2025-02-28 13:29:39 +01:00

CWE-300

raw test output

2025-02-28 13:29:39 +01:00

CWE-312

raw test output

2025-02-28 13:29:39 +01:00

CWE-313

raw test output

2025-02-28 13:29:39 +01:00

CWE-326

raw test output

2025-02-28 13:29:39 +01:00

CWE-327

raw test output

2025-02-28 13:29:39 +01:00

CWE-338

raw test output

2025-02-28 13:29:39 +01:00

CWE-346

raw test output

2025-02-28 13:29:39 +01:00

CWE-347

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-352

raw test output

2025-02-28 13:29:39 +01:00

CWE-367

raw test output

2025-02-28 13:29:39 +01:00

CWE-377

raw test output

2025-02-28 13:29:39 +01:00

CWE-384

raw test output

2025-02-28 13:29:39 +01:00

CWE-400

Javascript: Update test files.

2025-04-23 15:41:41 +02:00

CWE-451

raw test output

2025-02-28 13:29:39 +01:00

CWE-502

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-506

raw test output

2025-02-28 13:29:39 +01:00

CWE-522-DecompressionBombs

Add TypedArrays flow summaries for Uint8Array and buffer property

2025-04-07 15:15:24 +02:00

CWE-598

raw test output

2025-02-28 13:29:39 +01:00

CWE-601

raw test output

2025-02-28 13:29:39 +01:00

CWE-611

JS: Remove duplicate '$ Alert' in libxml test

2025-03-10 14:23:44 +01:00

CWE-614

raw test output

2025-02-28 13:29:39 +01:00

CWE-640

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-643

raw test output

2025-02-28 13:29:39 +01:00

CWE-693

raw test output

2025-02-28 13:29:39 +01:00

CWE-730

Update javascript/ql/test/query-tests/Security/CWE-730/server-crash.js

2025-03-10 14:21:46 +01:00

CWE-754

raw test output

2025-02-28 13:29:39 +01:00

CWE-770

raw test output

2025-02-28 13:29:39 +01:00

CWE-776

raw test output

2025-02-28 13:29:39 +01:00

CWE-798

Updated modeling of aws-sdk with MaD

2025-04-28 14:00:12 +02:00

CWE-807

raw test output

2025-02-28 13:29:39 +01:00

CWE-829

raw test output

2025-02-28 13:29:39 +01:00

CWE-830

raw test output

2025-02-28 13:29:39 +01:00

CWE-834

raw test output

2025-02-28 13:29:39 +01:00

CWE-843

raw test output

2025-02-28 13:29:39 +01:00

CWE-862

raw test output

2025-02-28 13:29:39 +01:00

CWE-912

Added NodeJSFileSystemVectorWrite class for vectored write.

2025-03-28 13:07:23 +01:00

CWE-915

raw test output

2025-02-28 13:29:39 +01:00

CWE-916

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-918

JS: Add URL from url package constructor taint step for request forgery detection

2025-05-30 18:32:02 +02:00

CWE-1004

raw test output

2025-02-28 13:29:39 +01:00

CWE-1275

raw test output

2025-02-28 13:29:39 +01:00