hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-19 10:23:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
z80coder/ATM-feature-optimisation
codeql/java/change-notes/2021-02-15-snakeyaml-fn-fix.md
Alvaro Muñoz 3d3f4ba797 add change note
2021-02-15 14:53:16 +01:00

288 B
Raw Permalink Blame History

lgtm,codescanning

  • The query "Unsafe Deserialization" (java/unsafe-deserialization) has been improved to report those cases where SnakeYaml Constructor is used to fix the unmarshaled object graph root's type but injection is still possible in nested nodes of the object graph.