Skip to content

Releases: Bearer/bearer-rules

v0.46.4

12 Nov 14:57
b6fe504
Compare
Choose a tag to compare

What's Changed

  • fix(javascript): handle mysql pool as a promise by @elsapet in #467

Full Changelog: v0.46.3...v0.46.4

v0.46.3

18 Oct 15:28
111b0ed
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.46.2...v0.46.3

v0.46.2

07 Oct 09:37
b6a88ee
Compare
Choose a tag to compare

What's Changed

  • fix(ruby): tighten sql injection patterns by @elsapet in #465

Full Changelog: v0.46.1...v0.46.2

v0.46.1

26 Sep 12:35
fee8e3d
Compare
Choose a tag to compare

What's Changed

  • fix(golang): remove encoder pattern from deserialization rule (CWE-502) by @elsapet in #464

Full Changelog: v0.46.0...v0.46.1

v0.46.0

02 Aug 09:16
0758cab
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.45.7...v0.46.0

v0.45.7

22 Jul 15:22
74423b4
Compare
Choose a tag to compare

What's Changed

  • fix(golang): deserialization pattern for gob by @elsapet in #460

Full Changelog: v0.45.6...v0.45.7

v0.45.6

22 Jul 14:24
7f40bb3
Compare
Choose a tag to compare

What's Changed

  • fix: remove golang patterns for deserialization that generate FP by @gotbadger in #459

Full Changelog: v0.45.5...v0.45.6

v0.45.5

15 Jul 10:22
4b1294d
Compare
Choose a tag to compare

What's Changed

  • fix: use more appropriate cwe for file permission rules by @didroe in #458

Full Changelog: v0.45.4...v0.45.5

v0.45.4

04 Jul 14:44
f4ac2b1
Compare
Choose a tag to compare

What's Changed

  • fix(golang): permissive regex rule for validation purposes by @elsapet in #457

Full Changelog: v0.45.3...v0.45.4

v0.45.3

19 Jun 08:15
9d5359a
Compare
Choose a tag to compare

What's Changed

Full Changelog: v0.45.2...v0.45.3