Files
codeql/javascript/change-notes/2020-12-16-indirect-cmd-libraries.md
Erik Krogh Kristensen 94e07bb91c add change note
2020-12-16 15:10:03 +01:00

10 lines
479 B
Markdown

lgtm,codescanning
* The `js/indirect-command-line-injection` query now supports more command-line parsing libraries.
Affected packages are
[arg](https://www.npmjs.com/package/arg),
[argparse](https://www.npmjs.com/package/argparse),
[command-line-args](https://www.npmjs.com/package/command-line-args),
[meow](https://www.npmjs.com/package/meow),
[dashdash](https://www.npmjs.com/package/dashdash),
[commander](https://www.npmjs.com/package/commander).