BTCC
/
BTCC Square
/
Global Cryptocurrency
/
GitHub’s CodeQL 2.23.0 Enhances Security Detection with Rust Log Injection Support
GitHub’s CodeQL 2.23.0 Enhances Security Detection with Rust Log Injection Support
8
1
BTCCSquare news:
GitHub has rolled out CodeQL 2.23.0, marking a significant upgrade to its static analysis engine. The update introduces a new Rust query for log injection detection, addressing vulnerabilities where malicious actors could manipulate log entries. Enhanced extractor performance and improved library modeling for std::fs, async_std::fs, and tokio::fs further bolster Rust security.
Java and C/C++ also see notable improvements. The query java/insecure-spring-actuator-config has been promoted to the main query pack and renamed java/spring-boot-exposed-actuators-config. This change ensures default scans now include detection of exposed Spring Boot actuators via configuration files.
By:
