Asger F 76b7228160 JS: Remove js/actions/command-injection ...

Superseded by actions/command-injection/{medium,critical}

2025-06-23 14:41:26 +02:00

..

CWE-020

raw test output

2025-02-28 13:29:39 +01:00

CWE-022

Applied copilot suggestion.

2025-04-10 14:13:48 +02:00

CWE-073

raw test output

2025-02-28 13:29:39 +01:00

CWE-078

Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource

2025-05-01 11:14:15 +02:00

CWE-079

JS: track taint through serialize-javascript calls with object arguments

2025-06-16 10:38:20 +02:00

CWE-089

Add test case to ensure exec calls without middleware injection into Express are not flagged.

2025-03-30 14:09:15 +02:00

CWE-094

JS: Remove js/actions/command-injection

2025-06-23 14:41:26 +02:00

CWE-116

Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js

2025-03-10 14:19:33 +01:00

CWE-117

raw test output

2025-02-28 13:29:39 +01:00

CWE-134

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-178

raw test output

2025-02-28 13:29:39 +01:00

CWE-200

Applied copilot suggestions.

2025-03-28 13:19:11 +01:00

CWE-201

raw test output

2025-02-28 13:29:39 +01:00

CWE-209

raw test output

2025-02-28 13:29:39 +01:00

CWE-295

raw test output

2025-02-28 13:29:39 +01:00

CWE-300

raw test output

2025-02-28 13:29:39 +01:00

CWE-312

JS: Remove js/actions/actions-artifact-leak

2025-06-23 14:39:28 +02:00

CWE-313

raw test output

2025-02-28 13:29:39 +01:00

CWE-326

raw test output

2025-02-28 13:29:39 +01:00

CWE-327

raw test output

2025-02-28 13:29:39 +01:00

CWE-338

raw test output

2025-02-28 13:29:39 +01:00

CWE-346

raw test output

2025-02-28 13:29:39 +01:00

CWE-347

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-352

raw test output

2025-02-28 13:29:39 +01:00

CWE-367

raw test output

2025-02-28 13:29:39 +01:00

CWE-377

raw test output

2025-02-28 13:29:39 +01:00

CWE-384

raw test output

2025-02-28 13:29:39 +01:00

CWE-400

Javascript: Update test files.

2025-04-23 15:41:41 +02:00

CWE-451

raw test output

2025-02-28 13:29:39 +01:00

CWE-502

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-506

raw test output

2025-02-28 13:29:39 +01:00

CWE-522-DecompressionBombs

Add TypedArrays flow summaries for Uint8Array and buffer property

2025-04-07 15:15:24 +02:00

CWE-598

raw test output

2025-02-28 13:29:39 +01:00

CWE-601

raw test output

2025-02-28 13:29:39 +01:00

CWE-611

JS: Remove duplicate '$ Alert' in libxml test

2025-03-10 14:23:44 +01:00

CWE-614

raw test output

2025-02-28 13:29:39 +01:00

CWE-640

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-643

raw test output

2025-02-28 13:29:39 +01:00

CWE-693

raw test output

2025-02-28 13:29:39 +01:00

CWE-730

Update javascript/ql/test/query-tests/Security/CWE-730/server-crash.js

2025-03-10 14:21:46 +01:00

CWE-754

raw test output

2025-02-28 13:29:39 +01:00

CWE-770

raw test output

2025-02-28 13:29:39 +01:00

CWE-776

raw test output

2025-02-28 13:29:39 +01:00

CWE-798

Updated modeling of aws-sdk with MaD

2025-04-28 14:00:12 +02:00

CWE-807

raw test output

2025-02-28 13:29:39 +01:00

CWE-829

raw test output

2025-02-28 13:29:39 +01:00

CWE-830

raw test output

2025-02-28 13:29:39 +01:00

CWE-834

raw test output

2025-02-28 13:29:39 +01:00

CWE-843

raw test output

2025-02-28 13:29:39 +01:00

CWE-862

raw test output

2025-02-28 13:29:39 +01:00

CWE-912

Added NodeJSFileSystemVectorWrite class for vectored write.

2025-03-28 13:07:23 +01:00

CWE-915

raw test output

2025-02-28 13:29:39 +01:00

CWE-916

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-918

Merge pull request #19784 from Napalys/js/express_middleware

2025-06-20 15:36:26 +02:00

CWE-1004

raw test output

2025-02-28 13:29:39 +01:00

CWE-1275

raw test output

2025-02-28 13:29:39 +01:00