Product Announcements — Mike M (Veracode TPM) (Community Member) asked a question.

📣 Static Analysis Product Updates - Upcoming changes for the October Release

Next week's October Static Analysis Release includes the following:

 

  • Added Dart 3.1 and Flutter 3.13 support
  • Added JDK 21 (LTS) support
  • Enhanced Android 13 support
  • Improved CWE-259 (Use of Hard-coded Password) and CWE-798 (Use of Hard-coded Credentials) detection for Kotlin
  • Improved .NET analysis to ignore .NET ClickOnce “.deploy” files
  • Improved third-party detection for Java, JavaScript, PHP, iOS, PL/SQL and C++
  • Improved parsing for PL/SQL
  • Improved CWE-798 (Use of Hard-coded Credentials) detection for PHP
  • Enhanced Python analysis to treat modules consisting of all third party code as first party modules
  • Improved Groovy analysis of objects
  • Improved CWE-252 (Unchecked Return Value) detection for iOS
  • Improved JavaScript analysis of objects
  • Improved analysis of iOS apps to reduce CWE 284 (Improper Access Control) false positives
  • Improved CWE-693 (Protection Mechanism Failure), CWE-926 (Improper Export of Android Application Components), CWE-327 (Use of a Broken or Risky Cryptographic Algorithm) and CWE-798 (Use of Hard-coded Credentials) detection for Android

 


Topics (10)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.