mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
682a71176d
The CWE number for this query is associated with buffer overflows from printf/scanf-style functions in C++, which has likely determined its derived security score. But in JavaScript, a tainted format string is unlikely to lead to anything worse than log injection so we're manually update its score to reflect this.