…

..

2020-05-21-mongodb-sql-injection-sinks.md

…

2020-05-21-websocket-taintsource.md

…

2020-06-30-jooq-sql-injection-sinks.md

…

2020-07-03-more-pathcreations.md

…

2020-07-09-untrusted-data-to-external-api.md

…

2020-07-13-stacktraceexposure-fp-fix.md

…

2020-08-11-printwriter-format-xss-sink.md

…

2020-08-14-dataflow-dispatch-instance-arg-ctx.md

…

2020-08-17-string-formatted.md

…

2020-08-24-records-flow.md

…

2020-08-31-extensible-security-queries.md

…

2020-09-08-blockstmt.md

…

2020-09-17-exectainted-array.md

…

2020-09-21-jhipster-gen-prng-query.md

…

2020-09-22-hibernate-sql-sinks.md

…

2020-09-23-spring-multipart-request-sources.md

…

2020-10-03-android-intent-taintsource.md

…

2020-10-07-fastjson-deserialization-sink.md

…

2020-10-16-guava-flow-steps.md

…

2020-10-27-insecure-bean-validation.md

…

2020-11-04-commonslang-unsafe-deserialization-sinks.md

…

2020-12-09-xxe-fp-fix.md

…

2021-01-12-unsafe-hostname-verification.md

…

2021-01-14-java-15-support.md

…

2021-01-19-struts-xml-extraction.md

…

2021-02-09-commons-string-utils.md

…

2021-02-15-commons-array-utils.md

…

2021-02-15-snakeyaml-fn-fix.md

…

2021-02-17-apache-http.md

…

2021-02-23-deprecated-jcenter-bintray.md

…

2021-03-01-fluent-interface-data-flow.md

…

2021-03-02-apache-text-misc.md

…

2021-03-02-guava-io.md

…

2021-03-05-commons-lang-randomutils.md

…

2021-03-05-commons-object-utils.md

…

2021-03-05-play-framework.md

…

2021-03-05-regex-utils.md

…

2021-03-10-guava-base.md

…

2021-03-11-commons-strbuilder.md

…

2021-03-18-commons-tostring-builder.md

…

2021-03-22-jax-rs-improvements.md

…

2021-03-23-guava-collections-and-preconditions.md

…

2021-03-25-remove-legacy-code-duplication-library.md

…

2021-03-25-remove-legacy-filter-queries.md

…

2021-04-02-add-spring-validation-errors.md

…

2021-04-06-ssrf-query.md

…

2021-04-14-membertype.md

…

2021-04-26-xpath-injection-query.md

…

2021-05-03-guava-first-non-null.md

…

2021-05-03-jackson-dataflow-deserialization.md

…

2021-05-04-jexl-injection-query.md

…

2021-05-05-kryo-improvements.md

…

2021-05-06-unsafe-android-access-query.md

…

2021-05-11-apache-tuples.md

…

2021-05-11-ratpack-support.md

…

2021-05-12-hardcoded-azure-credentials-in-api-call.md

…

2021-05-12-xxe-fp-fix.md

…

2021-05-13-ognl-injection-query.md

…

2021-05-14-close-resource-leaks-improvements.md

…

2021-05-17-add-unsafe-deserialization-sinks.md

…

2021-05-17-jackson-deserialization-sink.md

…

2021-05-17-missing-jwt-signature-check-query.md

…

2021-05-20-jndi-injection-query.md

…

2021-05-20-savedrequest-taintsources.md

…

2021-05-24-hardcoded-shiro-key-in-api-call.md

…

2021-05-28-remove-senderror-xss-sink.md

…

2021-05-31-add-spring-stringutils.md

…

2021-06-01-collection-flow.md

…

2021-06-01-insecure-basic-auth-query.md

…

2021-06-01-statement-toString.md

…

2021-06-02-mvel-injection-query.md

…

2021-06-08-spel-injection-query.md

…

2021-06-08-spring-http.md

…

2021-06-08-spring-propertyvalues.md

…

2021-06-11-tainted-key-read-steps.md

…

2021-06-14-groovy-code-injection-query.md

…

2021-06-16-xslt-injection-query.md

…

2021-06-18-apache-mutable.md

…

2021-06-18-insecure-java-mail-query.md

…

2021-06-22-more-steps-for-bytebuffer-inputstream.md

…

2021-06-22-util-optional.md

…

2021-06-23-generic-type-names.md

…

2021-06-24-dataflow-implicit-reads.md

…

2021-06-25-apache-collections-maputils-keyvalue.md

…

2021-06-25-jax-rs-content-types.md

…

2021-06-29-javax-json-models.md

…

2021-07-01-spring-collections.md

…

2021-07-01-spring-webmultipart.md

…

2021-07-01-spring-webutil.md

…

2021-07-01-url-classloader-reactive-webclient.md

…

2021-07-02-split-queries.md

…

2021-07-14-spring-jdbc.md

…

2021-07-19-json-java.md

…

2021-07-22-model-collection-constructors.md

…

2021-07-27-apache-collections-base-package.md

…

2021-07-28-guava-cache.md

…

2021-08-02-android-intent-redirect-query.md

…

2021-08-02-guava-collections.md

…

2021-08-03-spring-content-types.md

…

2021-08-04-jabsorb-unsafe-deserialization.md

…

2021-08-05-jodd-unsafe-deserialization.md

…

2021-08-09-flexjson-unsafe-deserialization.md

…

2021-08-10-gson-unsafe-deserialization.md

…

2021-08-12-jax-rs-filter-sources.md

…

2021-08-23-getPrimaryQlClasses.md

…

2021-08-23-local-interfaces-enums.md

…

2021-08-24-downgrade-sql-unescaped.md

…

2021-09-03-android-sensitive-broadcast.md

…

2021-09-13-android-uri.md

…

2021-09-13-javadoc-type-parameters.md

…

2021-09-13-location-toString.md

…

2021-09-14-conditional-bypass-improvements.md

…

2021-09-14-jsf-support.md

…

2021-09-27-apache-collections-subpackages.md

…

2021-10-07-java-util-stream.md

…

2021-10-20-more-specific-types.md

…

2021-10-29-deprecate-String-getRepresentedString.md

…

2021-10-29-improved-ratpack-support.md

…

2021-10-29-optional-lambda-flow.md

…