Skip to content

docs(code): October 2026 release #1950

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
sebsnyk wants to merge 5 commits into from
+13 −2
Closed

docs(code): October 2026 release #1950

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
3f17b4a
Add the October 2026 Java and JavaScript libraries to the framework l…
sebsnyk Oct 9, 2026
dc148f4
Add the Java mass assignment and Ruby SSRF rules to the rule tables
sebsnyk Oct 9, 2026
17e6ffa
Document go.mod and tsconfig.json import resolution for Snyk Code
sebsnyk Oct 9, 2026
8708414
Remove Mako from the supported template engines
sebsnyk Oct 9, 2026
c893e6d
Apply batched suggestions from code review
VeronicaSnyk Oct 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions discover-snyk/supported-languages/supported-languages-list/go.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,8 @@ For Go with Snyk Code, Snyk supports:
* Go Standard Library comprehensive as a library
* .`go` as a file format

To trace data flow across packages in your Project, Snyk Code reads the `go.mod` file to resolve package imports.

Available features:

* Reports
Expand Down
3 changes: 3 additions & 0 deletions ...ver-snyk/supported-languages/supported-languages-list/java-and-kotlin/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,10 +35,12 @@ For Java and Kotlin, the following frameworks and libraries are supported:
{% columns %}
{% column %}
* Amazon AWS SDK
* Amazon AWS SDK DynamoDB, including the Enhanced Client
* Android Standard Library
* Apache Camel
* Apache Commons
* Apache Commons Collections
* Apache Commons FileUpload
* Apache CXF
* Apache Tomcat
* Apache XML
Expand Down Expand Up @@ -96,6 +98,7 @@ For Java and Kotlin, the following frameworks and libraries are supported:
* Spring AI
* Spring boot
* Spring Cloud Config
* Spring Data MongoDB
* Spring Security OAuth2 Client
* Spring Web, MVC and JDBC
* Spring WebFlux
Expand Down
4 changes: 4 additions & 0 deletions discover-snyk/supported-languages/supported-languages-list/javascript/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,8 +29,10 @@ The following frameworks and libraries are supported:
* Angular
* apollo-server
* bcrypt-nodejs
* Bootbox
* cross-spawn
* crypto-js
* d3
* date-fns
* dayjs
* dompurify
Expand Down Expand Up @@ -106,6 +108,8 @@ The following frameworks and libraries are supported:

The following file formats are supported: `.ejs`, `.es`, `.es6`, `.htm`, `.html`, `.js`, `.jsx`, `.ts`, `.cts`, `.mts`, `.tsx`, `.vue`, `.mjs`, `.cjs`, `.erb` .

To resolve imports that use path aliases when tracing data flow across modules, Snyk Code reads `tsconfig.json` and `jsconfig.json` in your Project.

### Available features

* Reports
Expand Down
1 change: 0 additions & 1 deletion discover-snyk/supported-languages/supported-languages-list/python/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,7 +120,6 @@ Snyk Code parses template files and follows data from your application code into
For Python, Snyk Code supports the following template engines:

* Jinja2
* Mako

For file extensions and the full set of supported language and template engine combinations, visit [Template file analysis](../../technical-specifications-and-guidance.md#template-file-analysis).

Expand Down
2 changes: 2 additions & 0 deletions discover-snyk/supported-languages/supported-languages-list/typescript.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,8 @@ For an overview of the supported security rules, visit [JavaScript and TypeScrip

For TypeScript with Snyk Code, the following file formats are supported: `.ejs`, `.es`, `.es6`, `.htm`, `.html`, `.js`, `.jsx`, `.ts`, `.cts`, `.mts`, `.tsx`, `.vue`, `.mjs`, `.cjs`, `.erb`

To resolve imports that use path aliases when tracing data flow across modules, Snyk Code reads `tsconfig.json` and `jsconfig.json` in your Project.

Available features:

* Reports
Expand Down
1 change: 0 additions & 1 deletion discover-snyk/supported-languages/technical-specifications-and-guidance.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,7 +88,6 @@ Support is defined by the pairing of a template engine with the language that re
| FreeMarker | `.ftl`, `.ftlh`, `.ftlx` | Java, Kotlin, Groovy |
| Handlebars | `.hbs`, `.handlebars` | JavaScript |
| Jinja2 | `.j2`, `.jinja`, `.jinja2` | Python |
| Mako | `.mako` | Python |
| Mustache | `.mustache`, `.mu` | JavaScript, C# |
| Pug | `.pug`, `.jade` | JavaScript |
| Razor | `.cshtml`, `.razor` | C# |
Expand Down
1 change: 1 addition & 0 deletions ...fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/java-rules.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,3 +78,4 @@ Each rule includes the following information.
| Insufficient Session Expiration | CWE-613 | OWASP:A07:2025 |
| XML External Entity (XXE) Injection | CWE-611 | OWASP:A02:2025 |
| XPath Injection | CWE-643 | OWASP:A05:2025 |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | CWE-915 | OWASP:A08:2025, OWASP-API:API3:2023 |
1 change: 1 addition & 0 deletions ...fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/ruby-rules.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,3 +46,4 @@ Each rule includes the following information.
| XML External Entity (XXE) Injection | CWE-611 | OWASP:A02:2025 |
| XPath Injection | CWE-643 | OWASP:A05:2025 |
| Regular Expression Denial of Service (ReDoS) | CWE-400 | OWASP-API:API4:2023 |
| Server-Side Request Forgery (SSRF) | CWE-918 | CWE Top 25, OWASP:A01:2025, OWASP-API:API7:2023 |
Loading