v0.46.5

What's Changed

• fix(python): improve traversal rule and description by @gotbadger in #468
• build(deps): bump micromatch from 4.0.5 to 4.0.8 by @dependabot in #462
• fix(js): add sequelize fallback by @elsapet in #470

Full Changelog: v0.46.4...v0.46.5

v0.46.4

What's Changed

• fix(javascript): handle mysql pool as a promise by @elsapet in #467

Full Changelog: v0.46.3...v0.46.4

v0.46.3

What's Changed

• fix(python): update sql sanitizer by @elsapet in #466

Full Changelog: v0.46.2...v0.46.3

v0.46.2

What's Changed

• fix(ruby): tighten sql injection patterns by @elsapet in #465

Full Changelog: v0.46.1...v0.46.2

v0.46.1

What's Changed

• fix(golang): remove encoder pattern from deserialization rule (CWE-502) by @elsapet in #464

Full Changelog: v0.46.0...v0.46.1

v0.46.0

What's Changed

• feat(java): add rule for spring ui model by @gotbadger in #461

Full Changelog: v0.45.7...v0.46.0

v0.45.7

What's Changed

• fix(golang): deserialization pattern for gob by @elsapet in #460

Full Changelog: v0.45.6...v0.45.7

v0.45.6

What's Changed

• fix: remove golang patterns for deserialization that generate FP by @gotbadger in #459

Full Changelog: v0.45.5...v0.45.6

v0.45.5

What's Changed

• fix: use more appropriate cwe for file permission rules by @didroe in #458

Full Changelog: v0.45.4...v0.45.5

v0.45.4

What's Changed

• fix(golang): permissive regex rule for validation purposes by @elsapet in #457

Full Changelog: v0.45.3...v0.45.4