Next week's January Static Analysis Release includes the following:

Updated language and framework support

.NET

• Improved CWE-1174 flaw detection resulting in a reduction in false positives

Dart and Flutter

• Dart 3.6 and Flutter 3.27 support

Java

• Improved third-party code detection
• Improved cleanser detection for CWE-117

JavaScript and TypeScript

• Improved CWE-80 flaw detection
• Improved third-party code detection

PHP

• Enhanced overall flaw detection for PHP, which may lead to an increase in the number of reported flaws

PL/SQL

• Improved parsing for PL/SQL

T-SQL

• Improved SQL injection detection
• Improved parsing for T-SQL

Other languages

• Improved flaw description and remediation details for CWE-284 and CWE-115
• Updated CWE Top 25 to 2024 version. All policies having Auto-Update CWE Top 25 as Requirement are impacted by this change
• Improved CWE-259 and 798 flaw detection, resulting in a reduction in false positives for all language