- Added new regex for code injection: 'execfile'.
- Added new regex for command injection: 'subprocess.run', 'commands.getoutput'. Modified 'os.popen' regex for better detection.
- Added new regex for untrusted source: 'marshal.loads', 'pickle.Unpickler'.
- Modified 'dangerous-yaml' regex to include 'yaml.safe_load'.
- Added new regex in 'sqli' for various database execute functions.
* info field reorder
* reference values refactored to list
* added new lines after the id and before the protocols
* removed extra new lines
* split really long descriptions to multiple lines (part 1)
* other minor fixes
GitHub Action
sandeep
Dhiyaneshwaran
Mehran Seifalinia
forgedhallpass
sandeep
Prince Chaddha
Majid Iranpour
majid