mirror of
https://github.com/github/codeql.git
synced 2025-12-18 09:43:15 +01:00
3 lines
380 B
Markdown
3 lines
380 B
Markdown
lgtm,codescanning
|
|
* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`. The `suffix`, `prefix`, and `dir` arguments are all vulnerable to path-injection, and these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
|