Skip to content

V2.4.0: Latest

Choose a tag to compare

@duriantaco duriantaco released this 06 Nov 00:58
· 1457 commits to main since this release

Add

SKY-D211 (CRITICAL) + test –> SQL injection (cursor): tainted/string-built SQL into .execute etc
SKY-D217 (CRITICAL) -> SQL injection (raw-api): tainted SQL
SKY-D216 (CRITICAL) + test –> SSRF: tainted URL into HTTP clients
SKY-D215 (HIGH) + test –> Path traversal: tainted file path into open(...), os.* etc
SKY-D212 (CRITICAL) + test –> Cmd injection: tainted command to os.system(...) or subprocess.*(...).
Added new UI materials into the VSC extension

Full Changelog: v2.2.4...v2.4.0