diff --git a/discover-snyk/supported-languages/supported-languages-list/go.md b/discover-snyk/supported-languages/supported-languages-list/go.md index b8b834587944..b013239edd81 100644 --- a/discover-snyk/supported-languages/supported-languages-list/go.md +++ b/discover-snyk/supported-languages/supported-languages-list/go.md @@ -49,6 +49,8 @@ For Go with Snyk Code, Snyk supports: * Go Standard Library comprehensive as a library * .`go` as a file format +To trace data flow across packages in your Project, Snyk Code reads the `go.mod` file to resolve package imports. + Available features: * Reports diff --git a/discover-snyk/supported-languages/supported-languages-list/java-and-kotlin/README.md b/discover-snyk/supported-languages/supported-languages-list/java-and-kotlin/README.md index db1bf7661e0b..e65bd0a318f9 100644 --- a/discover-snyk/supported-languages/supported-languages-list/java-and-kotlin/README.md +++ b/discover-snyk/supported-languages/supported-languages-list/java-and-kotlin/README.md @@ -35,10 +35,12 @@ For Java and Kotlin, the following frameworks and libraries are supported: {% columns %} {% column %} * Amazon AWS SDK +* Amazon AWS SDK DynamoDB, including the Enhanced Client * Android Standard Library * Apache Camel * Apache Commons * Apache Commons Collections +* Apache Commons FileUpload * Apache CXF * Apache Tomcat * Apache XML @@ -96,6 +98,7 @@ For Java and Kotlin, the following frameworks and libraries are supported: * Spring AI * Spring boot * Spring Cloud Config +* Spring Data MongoDB * Spring Security OAuth2 Client * Spring Web, MVC and JDBC * Spring WebFlux diff --git a/discover-snyk/supported-languages/supported-languages-list/javascript/README.md b/discover-snyk/supported-languages/supported-languages-list/javascript/README.md index 78464807340e..0a031be6d0d7 100644 --- a/discover-snyk/supported-languages/supported-languages-list/javascript/README.md +++ b/discover-snyk/supported-languages/supported-languages-list/javascript/README.md @@ -29,8 +29,10 @@ The following frameworks and libraries are supported: * Angular * apollo-server * bcrypt-nodejs +* Bootbox * cross-spawn * crypto-js +* d3 * date-fns * dayjs * dompurify @@ -106,6 +108,8 @@ The following frameworks and libraries are supported: The following file formats are supported: `.ejs`, `.es`, `.es6`, `.htm`, `.html`, `.js`, `.jsx`, `.ts`, `.cts`, `.mts`, `.tsx`, `.vue`, `.mjs`, `.cjs`, `.erb` . +To resolve imports that use path aliases when tracing data flow across modules, Snyk Code reads `tsconfig.json` and `jsconfig.json` in your Project. + ### Available features * Reports diff --git a/discover-snyk/supported-languages/supported-languages-list/python/README.md b/discover-snyk/supported-languages/supported-languages-list/python/README.md index 8e00fe332d0c..a75831005efd 100644 --- a/discover-snyk/supported-languages/supported-languages-list/python/README.md +++ b/discover-snyk/supported-languages/supported-languages-list/python/README.md @@ -120,7 +120,6 @@ Snyk Code parses template files and follows data from your application code into For Python, Snyk Code supports the following template engines: * Jinja2 -* Mako For file extensions and the full set of supported language and template engine combinations, visit [Template file analysis](../../technical-specifications-and-guidance.md#template-file-analysis). diff --git a/discover-snyk/supported-languages/supported-languages-list/typescript.md b/discover-snyk/supported-languages/supported-languages-list/typescript.md index 3307128bb8e7..a187a0719bae 100644 --- a/discover-snyk/supported-languages/supported-languages-list/typescript.md +++ b/discover-snyk/supported-languages/supported-languages-list/typescript.md @@ -42,6 +42,8 @@ For an overview of the supported security rules, visit [JavaScript and TypeScrip For TypeScript with Snyk Code, the following file formats are supported: `.ejs`, `.es`, `.es6`, `.htm`, `.html`, `.js`, `.jsx`, `.ts`, `.cts`, `.mts`, `.tsx`, `.vue`, `.mjs`, `.cjs`, `.erb` +To resolve imports that use path aliases when tracing data flow across modules, Snyk Code reads `tsconfig.json` and `jsconfig.json` in your Project. + Available features: * Reports diff --git a/discover-snyk/supported-languages/technical-specifications-and-guidance.md b/discover-snyk/supported-languages/technical-specifications-and-guidance.md index 3639932b3797..5e1a30dbae67 100644 --- a/discover-snyk/supported-languages/technical-specifications-and-guidance.md +++ b/discover-snyk/supported-languages/technical-specifications-and-guidance.md @@ -88,7 +88,6 @@ Support is defined by the pairing of a template engine with the language that re | FreeMarker | `.ftl`, `.ftlh`, `.ftlx` | Java, Kotlin, Groovy | | Handlebars | `.hbs`, `.handlebars` | JavaScript | | Jinja2 | `.j2`, `.jinja`, `.jinja2` | Python | -| Mako | `.mako` | Python | | Mustache | `.mustache`, `.mu` | JavaScript, C# | | Pug | `.pug`, `.jade` | JavaScript | | Razor | `.cshtml`, `.razor` | C# | diff --git a/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/java-rules.md b/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/java-rules.md index ada898624dc4..79a427926207 100644 --- a/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/java-rules.md +++ b/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/java-rules.md @@ -78,3 +78,4 @@ Each rule includes the following information. | Insufficient Session Expiration | CWE-613 | OWASP:A07:2025 | | XML External Entity (XXE) Injection | CWE-611 | OWASP:A02:2025 | | XPath Injection | CWE-643 | OWASP:A05:2025 | +| Improperly Controlled Modification of Dynamically-Determined Object Attributes | CWE-915 | OWASP:A08:2025, OWASP-API:API3:2023 | diff --git a/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/ruby-rules.md b/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/ruby-rules.md index d49f28c49bc9..cb1c6ec554e1 100644 --- a/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/ruby-rules.md +++ b/scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/ruby-rules.md @@ -46,3 +46,4 @@ Each rule includes the following information. | XML External Entity (XXE) Injection | CWE-611 | OWASP:A02:2025 | | XPath Injection | CWE-643 | OWASP:A05:2025 | | Regular Expression Denial of Service (ReDoS) | CWE-400 | OWASP-API:API4:2023 | +| Server-Side Request Forgery (SSRF) | CWE-918 | CWE Top 25, OWASP:A01:2025, OWASP-API:API7:2023 |