mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
454 B
454 B
0.7.0
Minor Analysis Improvements
- New models have been added for
org.apache.commons.lang. - The query
java/unsafe-deserializationhas been updated to take into accountSerialKiller, a library used to prevent deserialization of arbitrary classes.
Bug Fixes
- The query "Arbitrary file write during archive extraction ("Zip Slip")" (
java/zipslip) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."