Skip to content

Commit ee396af

Browse files
committed
C#: Update analysis change notes.
1 parent 5ad060c commit ee396af

File tree

2 files changed

+3
-2
lines changed

2 files changed

+3
-2
lines changed

change-notes/1.19/analysis-csharp.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,8 @@
88

99
| **Query** | **Tags** | **Purpose** |
1010
|-----------------------------|-----------|--------------------------------------------------------------------|
11-
| *@name of query (Query ID)* | *Tags* |*Aim of the new query and whether it is enabled by default or not* |
11+
| Using a package with a known vulnerability (cs/use-of-vulnerable-package) | security, external/cwe/cwe-937 | Finds project build files that import packages with known vulnerabilities. This is included by default. |
12+
1213

1314
## Changes to existing queries
1415

csharp/ql/src/Security Features/CWE-937/VulnerablePackage.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @name Using a package with a known vulnerability.
2+
* @name Using a package with a known vulnerability
33
* @description Using a package with a known vulnerability is a security risk.
44
* Upgrade the package to a version that does not contain the vulnerability.
55
* @kind problem

0 commit comments

Comments
 (0)