Hello JavaScript and TypeScript developers, We are happy to announce a major improvement on the precision of our SAST engine :muscle:, detecting more server-side vulnerabilities in applications based on Node.Js and Express.js frameworks. Here is the list of injection vulnerabilities to be found wi…

JavaScript/TypeScript SAST finds more Node.js, Express.js server-side vulnerabilities

acalero (Antonio Calero) April 14, 2021, 11:21am 2

Hi Alex!

Do you know when it will be available for SonarQube on-premise commercial editions? We have been impacted by the slowest performance on one of our customers, the same way as described in this thread:

Do you know if a patch (8.8.1) will be released soon with the improved js security sensor?

Thanks and best regards.

Topic		Replies	Views
JavaScript and TypeScript analyzers detect 7 injection vulnerabilities Sonar Updates javascript , typescript , security , taint-analysis	0	1365	January 18, 2021
JavaScript analyzer detects Express's bad security configuration practices and XXE vulnerabilities Sonar Updates javascript , security	0	954	October 5, 2020
Security code reviews now available in TypeScript and 4 new Code Smell rules for JavaScript Sonar Updates javascript , typescript , sonarqube-cloud	0	1160	October 14, 2019
JavaScript and TypeScript analyzers help to detect non-encrypted communications, zip bomb attacks sensitive code Sonar Updates javascript , typescript , security	0	865	January 11, 2021
[Webinar] Securing with Clean Code: Unveiling and Mitigating Vulnerabilities Sonar Updates webinar , sonarqube-cloud	1	407	December 7, 2023

JavaScript/TypeScript SAST finds more Node.js, Express.js server-side vulnerabilities

Related topics